vps: fix addresses on isso module

Flake lock file updates:

• Updated input 'homepage':
    'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=b891d9a9b089351161161b869446ca058603014a' (2025-09-18)
  → 'git+https://git.posixlycorrect.com/fabian/homepage.git?ref=refs/heads/master&rev=04577fd42db03c89eca4f87f6c83d282df686a49' (2025-09-18)

flake.lock

@@ -238,11 +238,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1758070616,
-        "narHash": "sha256-VPmnIwfs9tiZks3wl7SxkHtXe8gkOaRMQG1N+wXudoo=",
+        "lastModified": 1758231157,
+        "narHash": "sha256-7iMBkMqnbbQDVosbYqq8pclLr8F5IE7jUZqTNPpL/rg=",
         "ref": "refs/heads/master",
-        "rev": "50d499a8fc192450719720680b6361f1e20cfa55",
-        "revCount": 53,
+        "rev": "04577fd42db03c89eca4f87f6c83d282df686a49",
+        "revCount": 63,
         "type": "git",
         "url": "https://git.posixlycorrect.com/fabian/homepage.git"
       },

sys/platforms/vps/srv/default.nix

@@ -18,5 +18,6 @@ with lib; {
     ./immich.nix
     ./mealie.nix
     ./dufs.nix
+    ./isso.nix
   ];
 }

sys/platforms/vps/srv/isso.nix

@@ -0,0 +1,44 @@
+{
+  lib,
+  pkgs,
+  ...
+}:
+with lib; {
+  services = {
+    nginx = {
+      virtualHosts."isso.posixlycorrect.com" = {
+        enableACME = true;
+        forceSSL = true;
+        extraConfig = ''
+          proxy_headers_hash_max_size 512;
+          proxy_headers_hash_bucket_size 128;
+        '';
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:8888/";
+        };
+      };
+    };
+
+    isso = {
+      enable = true;
+      settings = {
+        general = {
+          host = "http://isso.posixlycorrect.com";
+          dbpath = "/var/lib/isso/comments.db";
+          notify = "stdout";
+        };
+        moderation = {
+          enabled = false;
+          approve-if-email-previously-approved = false;
+          purge-after = "365d";
+        };
+        server = {
+          listen = "http://127.0.0.1:8888/";
+        };
+        guard = {
+          require-author = true;
+        };
+      };
+    };
+  };
+}