From 7cdcacbc03d0f76f5feacd6db8f8e68237b31671 Mon Sep 17 00:00:00 2001
From: Fabian Montero <fabian@posixlycorrect.com>
Date: Thu, 18 Sep 2025 11:02:49 -0600
Subject: [PATCH 1/4] flake.lock: Update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake lock file updates:

• Updated input 'homepage':
    'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=50d499a8fc192450719720680b6361f1e20cfa55' (2025-09-17)
  → 'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=b891d9a9b089351161161b869446ca058603014a' (2025-09-18)
---
 flake.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/flake.lock b/flake.lock
index 795f96d..1a2638c 100644
--- a/flake.lock
+++ b/flake.lock
@@ -238,11 +238,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1758070616,
-        "narHash": "sha256-VPmnIwfs9tiZks3wl7SxkHtXe8gkOaRMQG1N+wXudoo=",
+        "lastModified": 1758214626,
+        "narHash": "sha256-CwXUk0g9i9XswAzBjFC9BXoGi3CAsiDsX1Grzx65U2Q=",
         "ref": "refs/heads/master",
-        "rev": "50d499a8fc192450719720680b6361f1e20cfa55",
-        "revCount": 53,
+        "rev": "b891d9a9b089351161161b869446ca058603014a",
+        "revCount": 56,
         "type": "git",
         "url": "https://git.posixlycorrect.com/fabian/homepage.git"
       },

From 078ee248fe7dce26455aeff362d6b2cc9e8207db Mon Sep 17 00:00:00 2001
From: Fabian Montero <fabian@posixlycorrect.com>
Date: Thu, 18 Sep 2025 15:33:27 -0600
Subject: [PATCH 2/4] vps: add isso comment server

---
 sys/platforms/vps/srv/default.nix |  1 +
 sys/platforms/vps/srv/isso.nix    | 44 +++++++++++++++++++++++++++++++
 2 files changed, 45 insertions(+)
 create mode 100644 sys/platforms/vps/srv/isso.nix

diff --git a/sys/platforms/vps/srv/default.nix b/sys/platforms/vps/srv/default.nix
index 71beeca..a4753d5 100644
--- a/sys/platforms/vps/srv/default.nix
+++ b/sys/platforms/vps/srv/default.nix
@@ -18,5 +18,6 @@ with lib; {
     ./immich.nix
     ./mealie.nix
     ./dufs.nix
+    ./isso.nix
   ];
 }
diff --git a/sys/platforms/vps/srv/isso.nix b/sys/platforms/vps/srv/isso.nix
new file mode 100644
index 0000000..e845c2f
--- /dev/null
+++ b/sys/platforms/vps/srv/isso.nix
@@ -0,0 +1,44 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+with lib; {
+  services = {
+    nginx = {
+      virtualHosts."isso.posixlycorrect.com" = {
+        enableACME = true;
+        forceSSL = true;
+        extraConfig = ''
+          proxy_headers_hash_max_size 512;
+          proxy_headers_hash_bucket_size 128;
+        '';
+        locations."/" = {
+          proxyPass = "http://[::1]:8099";
+        };
+      };
+    };
+
+    isso = {
+      enable = true;
+      settings = {
+        general = {
+          host = "http://isso.posixlycorrect.com";
+          dbpath = "/var/lib/isso/comments.db";
+          notify = "stdout";
+        };
+        moderation = {
+          enabled = false;
+          approve-if-email-previously-approved = false;
+          purge-after = "365d";
+        };
+        server = {
+          listen = "http://[::1]:8099";
+        };
+        guard = {
+          require-author = true;
+        };
+      };
+    };
+  };
+}

From 22b9a7f8cd25125bc4072937f62d89b1d80a6507 Mon Sep 17 00:00:00 2001
From: Fabian Montero <fabian@posixlycorrect.com>
Date: Thu, 18 Sep 2025 15:35:21 -0600
Subject: [PATCH 3/4] flake.lock: Update
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Flake lock file updates:

• Updated input 'homepage':
    'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=b891d9a9b089351161161b869446ca058603014a' (2025-09-18)
  → 'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=04577fd42db03c89eca4f87f6c83d282df686a49' (2025-09-18)
---
 flake.lock | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/flake.lock b/flake.lock
index 1a2638c..6dbc1cc 100644
--- a/flake.lock
+++ b/flake.lock
@@ -238,11 +238,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1758214626,
-        "narHash": "sha256-CwXUk0g9i9XswAzBjFC9BXoGi3CAsiDsX1Grzx65U2Q=",
+        "lastModified": 1758231157,
+        "narHash": "sha256-7iMBkMqnbbQDVosbYqq8pclLr8F5IE7jUZqTNPpL/rg=",
         "ref": "refs/heads/master",
-        "rev": "b891d9a9b089351161161b869446ca058603014a",
-        "revCount": 56,
+        "rev": "04577fd42db03c89eca4f87f6c83d282df686a49",
+        "revCount": 63,
         "type": "git",
         "url": "https://git.posixlycorrect.com/fabian/homepage.git"
       },

From 62ff7eb5ca556d1299449997491a649f634aaada Mon Sep 17 00:00:00 2001
From: Fabian Montero <fabian@posixlycorrect.com>
Date: Thu, 18 Sep 2025 15:45:52 -0600
Subject: [PATCH 4/4] vps: fix addresses on isso module

---
 sys/platforms/vps/srv/isso.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sys/platforms/vps/srv/isso.nix b/sys/platforms/vps/srv/isso.nix
index e845c2f..97f9e91 100644
--- a/sys/platforms/vps/srv/isso.nix
+++ b/sys/platforms/vps/srv/isso.nix
@@ -14,7 +14,7 @@ with lib; {
           proxy_headers_hash_bucket_size 128;
         '';
         locations."/" = {
-          proxyPass = "http://[::1]:8099";
+          proxyPass = "http://127.0.0.1:8888/";
         };
       };
     };
@@ -33,7 +33,7 @@ with lib; {
           purge-after = "365d";
         };
         server = {
-          listen = "http://[::1]:8099";
+          listen = "http://127.0.0.1:8888/";
         };
         guard = {
           require-author = true;