feat(ops/nixos/camden): Add vhost for TVL homepage r/650

1 files changed, 15 insertions, 0 deletions

diff --git a/ops/nixos/camden/default.nix b/ops/nixos/camden/default.nix
index b941be03c7d1..42f80b7c5759 100644
--- a/ops/nixos/camden/default.nix
+++ b/ops/nixos/camden/default.nix
@@ -283,6 +283,21 @@ in lib.fix(self: {
       '';
     };
 
+    virtualHosts.tvl = {
+      serverName = "tvl.fyi";
+      useACMEHost = "tvl.fyi";
+      root = depot.web.tvl;
+      addSSL = true;
+
+      extraConfig = ''
+        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
+
+        location ~* \.(webp|woff2)$ {
+          add_header Cache-Control "public, max-age=31536000";
+        }
+      '';
+    };
+
     virtualHosts.cgit = {
       serverName = "git.tazj.in";
       serverAliases = [ "git.camden.tazj.in" ];