feat(ops/nevsky): run cgit & josh on nevsky

Change-Id: If62177d19c0c4e708dce7a20974f53827a133247
Reviewed-on: https://cl.tvl.fyi/c/depot/+/13086
Reviewed-by: sterni <sternenseemann@systemli.org>
Tested-by: BuildkiteCI

ops/machines/nevsky/default.nix

@@ -8,6 +8,8 @@ in
   imports = [
     (mod "builderball.nix")
     (mod "clbot.nix")
+    (mod "cgit.nix")
+    (mod "josh.nix")
     (mod "harmonia.nix")
     (mod "irccat.nix")
     (mod "known-hosts.nix")
@@ -19,6 +21,7 @@ in
     (mod "tvl-users.nix")
     (mod "www/cache.tvl.fyi.nix")
     (mod "www/cl.tvl.fyi.nix")
+    (mod "www/code.tvl.fyi.nix")
     (mod "www/self-cache.tvl.fyi.nix")
     (mod "www/self-redirect.nix")
     (depot.third_party.agenix.src + "/modules/age.nix")
@@ -309,6 +312,14 @@ in
       preserveGenerations = "60d";
     };
 
+    # Run cgit & josh to serve git
+    cgit = {
+      enable = true;
+      user = "git"; # run as the same user as gerrit
+    };
+
+    josh.enable = true;
+
     # Run a handful of Buildkite agents to support parallel builds.
     buildkite = {
       enable = true;