TinyIce: Single-binary Icecast2-compatible server (auto-HTTPS, multi-tenant)
TinyIce ❄️
Run it, and you've got a ready Icecast server in seconds.
Notice: This is a side project. Use it at your own risk. While it implements security best practices, it has not undergone an independent audit.
TinyIce is a lightweight, high-performance, and secure Icecast2-compatible streaming server written in Go. It is designed to be self-contained, easy to deploy, and provides a modern web interface for both administrators and listeners.
Why TinyIce?
Traditional streaming servers can be complex to configure and resource-heavy. TinyIce aims to solve this by providing:
- Instant Deployment: A single binary with all assets (templates, icons) embedded.
- Zero-Config Security: Unique secure credentials automatically generated on first run.
- Multi-Tenant Ready: Create multiple admin users who can only manage their own mount points.
- Edge-Ready Relaying: Pull streams from other servers with automatic reconnection and in-stream ICY metadata parsing.
- Secure & Hardened: Salted bcrypt password hashing, CSRF protection, and HTTP resource hardening.
- Auto-HTTPS: Built-in support for ACME (Let's Encrypt) for zero-configuration SSL certificates.
- Real-time Insights: SSE-powered dashboards with smooth, hardware-accelerated traffic charts.
- Playback History: Persistent song history stored in a lightweight SQLite database.
- Observability: Built-in Prometheus metrics endpoint and structured logging.
Features
- Icecast2 Compatible: Works with standard source clients (BUTT, OBS, Mixxx, LadioCast) and players (VLC, web browsers).
- Approval Workflow: New streams are hidden by default until approved by an administrator.
- Stream Relaying: Act as an edge node by pulling streams from remote servers.
- Dual-Protocol Architecture: Handles HTTPS for listeners while allowing legacy encoders to stream over plain HTTP.
- Playback Tracking: View the last 100 songs played per station in the admin dashboard.
- Public Directory Listing: Built-in support for Icecast YP protocol (e.g.,
dir.xiph.org). - Dynamic Management: Add, update, disable, or remove mount points, users, and relays on the fly.
- IP Banning: Instantly block malicious IPs from streaming or listening.
- Legacy API: Support for
/status-json.xslfor compatibility with existing Icecast tools. - Now Playing Metadata: Real-time display of song titles pushed from broadcast software or pulled from relays.
Getting Started
1. Build
Requires Go 1.21 or later.
go build -o tinyice
2. Run
./tinyice
On the first run, TinyIce will generate tinyice.json with unique random passwords. Save them from the terminal!
3. Stream
Point your encoder (e.g., BUTT) to:
- Server Type: Icecast 2
- Address: your-server-ip
- Port: 8000
- Password: [The generated source password]
- Mount: /live
Command Line Usage
./tinyice -host 0.0.0.0 -port 8000 -daemon -log-file tinyice.log
-host: Network interface to bind to (default: "0.0.0.0").-config: Path to the configuration file.-log-file: Path to a file for log output.-log-level:debug,info,warn,error.-json-logs: Enable structured JSON logging.-daemon: Run in the background.-pid-file: Path to write the process ID.
Performance
See PERFORMANCE.md for detailed hardware and traffic estimates.
License
Distributed under the Apache License 2.0. See LICENSE for more information.
Developed by DatanoiseTV
Source involved in this report: Read Original Article
