diff --git a/ops/machines/nevsky/default.nix b/ops/machines/nevsky/default.nix
index f3f8dcb1c..68948dbbd 100644
--- a/ops/machines/nevsky/default.nix
+++ b/ops/machines/nevsky/default.nix
@@ -8,6 +8,8 @@ in
   imports = [
     (mod "builderball.nix")
     (mod "clbot.nix")
+    (mod "cgit.nix")
+    (mod "josh.nix")
     (mod "harmonia.nix")
     (mod "irccat.nix")
     (mod "known-hosts.nix")
@@ -19,6 +21,7 @@ in
     (mod "tvl-users.nix")
     (mod "www/cache.tvl.fyi.nix")
     (mod "www/cl.tvl.fyi.nix")
+    (mod "www/code.tvl.fyi.nix")
     (mod "www/self-cache.tvl.fyi.nix")
     (mod "www/self-redirect.nix")
     (depot.third_party.agenix.src + "/modules/age.nix")
@@ -309,6 +312,14 @@ in
       preserveGenerations = "60d";
     };
 
+    # Run cgit & josh to serve git
+    cgit = {
+      enable = true;
+      user = "git"; # run as the same user as gerrit
+    };
+
+    josh.enable = true;
+
     # Run a handful of Buildkite agents to support parallel builds.
     buildkite = {
       enable = true;