| 14 Jul 2025 |
 matthewcroughan - nix.zone | and you have to gen that cert by hand, and it's not automatable and it's awkward | 14:27:45 |
 @saiko:knifepoint.net | In reply to @n4ch723hr3r:nope.chat
the main problem seems to be the inability to put it behind a reverse proxy oh. well, that’s mostly a http specific thing | 14:27:54 |
| @saiko:knifepoint.net | In reply to @matthewcroughan:defenestrate.it
Because the only way to run it properly is on port 80/443, if you want a letsencrypt SSL cert, because you can't proxy it no absolutely not | 14:27:58 |
| @saiko:knifepoint.net | I run mumble with a LE cert on its own port | 14:28:04 |
 @n4ch723hr3r:nope.chat | icecast has TLS built into it | 14:28:22 |
| @saiko:knifepoint.net | the certs are not bound to a specific port, so you can give it its own domain, get a cert via http on that domain and then use the cert for the other service | 14:29:18 |
| matthewcroughan - nix.zone | with self-signed certs? | 14:30:07 |
| @n4ch723hr3r:nope.chat | that too. you can specify a path to that cert | 14:30:34 |
| @saiko:knifepoint.net | this is what I do for mumble: https://git.dblsaiko.net/systems/tree/configurations/spike/murmur.nix
(sys2x.ssl.acmeCerts just adds an empty nginx virtual host with enableACME=true) | 14:30:53 |
| matthewcroughan - nix.zone | Well either way, the player seems to get confused if I reverse proxy | 14:31:01 |
| matthewcroughan - nix.zone | since the icecast streams are not http | 14:31:07 |
| @n4ch723hr3r:nope.chat | i've also just read somewhere that the maintainer discourages reverse-proxying | 14:31:36 |
| @saiko:knifepoint.net | how are you reverse-proxying it if it’s not http? | 14:31:37 |
| matthewcroughan - nix.zone | It is a combination of http and tcp | 14:31:49 |
| matthewcroughan - nix.zone | I wish I knew how this person set up this | 14:32:19 |
| @n4ch723hr3r:nope.chat | https://gist.github.com/virtadpt/94eb781cba3ec9c56a4f39ef6bf760f3 | 14:32:20 |
| matthewcroughan - nix.zone | https://brainmelter.brockman.news/ | 14:32:20 |
| matthewcroughan - nix.zone | Specifically I'm not, I'm failing | 14:32:40 |
| matthewcroughan - nix.zone | only the html web page on 8000 is working, the stream doesn't | 14:32:51 |
| @n4ch723hr3r:nope.chat | wtf is that audio | 14:32:59 |
| matthewcroughan - nix.zone | https://github.com/krebs/brainmelter/tree/main | 14:33:13 |
| matthewcroughan - nix.zone | Wait so once again, if I'm gonna use HLS, what am I using instead of icecast? | 14:34:03 |
| @n4ch723hr3r:nope.chat | FFMPeg? | 14:34:25 |
| @saiko:knifepoint.net | In reply to @matthewcroughan:defenestrate.it
It is a combination of http and tcp ah right, it had both.. I remember having it working back then but this was years ago so I forgot | 14:34:32 |
| matthewcroughan - nix.zone | Can I just use nginx itself? | 14:34:32 |
| @n4ch723hr3r:nope.chat | i would probably just script something small myself xD | 14:35:03 |
| @n4ch723hr3r:nope.chat | nginx to host the HLS stream where the HLS file gets regularily updated | 14:35:35 |
| matthewcroughan - nix.zone | So let's say I want to make a player and embed this onto a webpage, how do I do things like setting the max listeners, and stuff | 14:35:54 |
| matthewcroughan - nix.zone | is that responsibility now going to nginx? | 14:36:08 |
| @n4ch723hr3r:nope.chat | yeah, you can set a bucket for maximum http requests | 14:36:36 |
