diff --git a/flake.lock b/flake.lock index 795f96d..6dbc1cc 100644 --- a/flake.lock +++ b/flake.lock @@ -238,11 +238,11 @@ ] }, "locked": { - "lastModified": 1758070616, - "narHash": "sha256-VPmnIwfs9tiZks3wl7SxkHtXe8gkOaRMQG1N+wXudoo=", + "lastModified": 1758231157, + "narHash": "sha256-7iMBkMqnbbQDVosbYqq8pclLr8F5IE7jUZqTNPpL/rg=", "ref": "refs/heads/master", - "rev": "50d499a8fc192450719720680b6361f1e20cfa55", - "revCount": 53, + "rev": "04577fd42db03c89eca4f87f6c83d282df686a49", + "revCount": 63, "type": "git", "url": "https://git.posixlycorrect.com/fabian/homepage.git" }, diff --git a/sys/platforms/vps/srv/default.nix b/sys/platforms/vps/srv/default.nix index 71beeca..a4753d5 100644 --- a/sys/platforms/vps/srv/default.nix +++ b/sys/platforms/vps/srv/default.nix @@ -18,5 +18,6 @@ with lib; { ./immich.nix ./mealie.nix ./dufs.nix + ./isso.nix ]; } diff --git a/sys/platforms/vps/srv/isso.nix b/sys/platforms/vps/srv/isso.nix new file mode 100644 index 0000000..97f9e91 --- /dev/null +++ b/sys/platforms/vps/srv/isso.nix @@ -0,0 +1,44 @@ +{ + lib, + pkgs, + ... +}: +with lib; { + services = { + nginx = { + virtualHosts."isso.posixlycorrect.com" = { + enableACME = true; + forceSSL = true; + extraConfig = '' + proxy_headers_hash_max_size 512; + proxy_headers_hash_bucket_size 128; + ''; + locations."/" = { + proxyPass = "http://127.0.0.1:8888/"; + }; + }; + }; + + isso = { + enable = true; + settings = { + general = { + host = "http://isso.posixlycorrect.com"; + dbpath = "/var/lib/isso/comments.db"; + notify = "stdout"; + }; + moderation = { + enabled = false; + approve-if-email-previously-approved = false; + purge-after = "365d"; + }; + server = { + listen = "http://127.0.0.1:8888/"; + }; + guard = { + require-author = true; + }; + }; + }; + }; +}