{
  lib,
  pkgs,
  ...
}:
with lib; {
  services = {
    nginx = {
      virtualHosts."isso.posixlycorrect.com" = {
        enableACME = true;
        forceSSL = true;
        extraConfig = ''
          proxy_headers_hash_max_size 512;
          proxy_headers_hash_bucket_size 128;
        '';
        locations."/" = {
          proxyPass = "http://127.0.0.1:8888/";
        };
      };
    };

    isso = {
      enable = true;
      settings = {
        general = {
          host = "https://posixlycorrect.com/";
          dbpath = "/var/lib/isso/comments.db";
          notify = "stdout";
        };
        moderation = {
          enabled = false;
          approve-if-email-previously-approved = false;
          purge-after = "365d";
        };
        server = {
          listen = "http://127.0.0.1:8888/";
        };
        guard = {
          require-author = true;
        };
      };
    };
  };
}