The .dev TLS is on the HSTS preload list, so there's no need to set this header here at all. Change-Id: I253fa2427e75bd0808945cd5d53159cac74e7f8b Reviewed-on: https://cl.tvl.fyi/c/depot/+/11018 Autosubmit: flokli <flokli@flokli.de> Reviewed-by: tazjin <tazjin@tvl.su> Tested-by: BuildkiteCI
		
			
				
	
	
		
			46 lines
		
	
	
	
		
			1,006 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
			
		
		
	
	
			46 lines
		
	
	
	
		
			1,006 B
		
	
	
	
		
			Nix
		
	
	
	
	
	
{ depot, ... }:
 | 
						|
 | 
						|
{
 | 
						|
  imports = [
 | 
						|
    ./base.nix
 | 
						|
  ];
 | 
						|
 | 
						|
  config = {
 | 
						|
    services.nginx.virtualHosts."tvix.dev" = {
 | 
						|
      serverName = "tvix.dev";
 | 
						|
      enableACME = true;
 | 
						|
      forceSSL = true;
 | 
						|
      root = depot.tvix.website;
 | 
						|
    };
 | 
						|
 | 
						|
    services.nginx.virtualHosts."bolt.tvix.dev" = {
 | 
						|
      root = depot.web.tvixbolt;
 | 
						|
      enableACME = true;
 | 
						|
      forceSSL = true;
 | 
						|
    };
 | 
						|
 | 
						|
    # old domain, serve redirect
 | 
						|
    services.nginx.virtualHosts."tvixbolt.tvl.su" = {
 | 
						|
      enableACME = true;
 | 
						|
      forceSSL = true;
 | 
						|
      extraConfig = "return 301 https://bolt.tvix.dev$request_uri;";
 | 
						|
    };
 | 
						|
 | 
						|
    services.nginx.virtualHosts."docs.tvix.dev" = {
 | 
						|
      serverName = "docs.tvix.dev";
 | 
						|
      enableACME = true;
 | 
						|
      forceSSL = true;
 | 
						|
 | 
						|
      extraConfig = ''
 | 
						|
        location = / {
 | 
						|
          # until we have a better default page here
 | 
						|
          return 301 https://docs.tvix.dev/rust/tvix_eval/index.html;
 | 
						|
        }
 | 
						|
 | 
						|
        location /rust/ {
 | 
						|
          alias ${depot.tvix.rust-docs}/;
 | 
						|
        }
 | 
						|
      '';
 | 
						|
    };
 | 
						|
  };
 | 
						|
}
 |