!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

871 Members
Declaratively manage your switching, routing, wireless, tunneling and more. | Don't rely on `networking.*` for interface and routing setup, use systemd-networkd, ifstate or NetworkManager instead. | Set `SYSTEMD_LOG_LEVEL=debug` to debug networking issues with networkd | No bad nft puns, please. | Room recommendations: #sysops:nixos.org249 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
14 Jul 2025
@n4ch723hr3r:nope.chatn4ch723hr3rso it seems you can split some things apart14:20:24
@saiko:knifepoint.net@saiko:knifepoint.net
In reply to @matthewcroughan:defenestrate.it
Only if you have a spare IP to dedicate it to
why do you need a spare IP for icecast to work? I used to run it fine without one
14:24:35
@n4ch723hr3r:nope.chatn4ch723hr3rthe main problem seems to be the inability to put it behind a reverse proxy14:25:42
@matthewcroughan:defenestrate.itmatthewcroughanBecause the only way to run it properly is on port 80/443, if you want a letsencrypt SSL cert, because you can't proxy it14:27:24
@matthewcroughan:defenestrate.itmatthewcroughanand you have to gen that cert by hand, and it's not automatable and it's awkward14:27:45
@saiko:knifepoint.net@saiko:knifepoint.net
In reply to @n4ch723hr3r:nope.chat
the main problem seems to be the inability to put it behind a reverse proxy
oh. well, that’s mostly a http specific thing
14:27:54
@saiko:knifepoint.net@saiko:knifepoint.net
In reply to @matthewcroughan:defenestrate.it
Because the only way to run it properly is on port 80/443, if you want a letsencrypt SSL cert, because you can't proxy it
no absolutely not
14:27:58
@saiko:knifepoint.net@saiko:knifepoint.netI run mumble with a LE cert on its own port14:28:04
@n4ch723hr3r:nope.chatn4ch723hr3ricecast has TLS built into it14:28:22
@saiko:knifepoint.net@saiko:knifepoint.netthe certs are not bound to a specific port, so you can give it its own domain, get a cert via http on that domain and then use the cert for the other service14:29:18
@matthewcroughan:defenestrate.itmatthewcroughanwith self-signed certs?14:30:07
@n4ch723hr3r:nope.chatn4ch723hr3rthat too. you can specify a path to that cert14:30:34
@saiko:knifepoint.net@saiko:knifepoint.netthis is what I do for mumble: https://git.dblsaiko.net/systems/tree/configurations/spike/murmur.nix (sys2x.ssl.acmeCerts just adds an empty nginx virtual host with enableACME=true)14:30:53
@matthewcroughan:defenestrate.itmatthewcroughanWell either way, the player seems to get confused if I reverse proxy14:31:01
@matthewcroughan:defenestrate.itmatthewcroughansince the icecast streams are not http14:31:07
@n4ch723hr3r:nope.chatn4ch723hr3ri've also just read somewhere that the maintainer discourages reverse-proxying14:31:36
@saiko:knifepoint.net@saiko:knifepoint.nethow are you reverse-proxying it if it’s not http?14:31:37
@matthewcroughan:defenestrate.itmatthewcroughanIt is a combination of http and tcp14:31:49
@matthewcroughan:defenestrate.itmatthewcroughanI wish I knew how this person set up this14:32:19
@n4ch723hr3r:nope.chatn4ch723hr3rhttps://gist.github.com/virtadpt/94eb781cba3ec9c56a4f39ef6bf760f314:32:20
@matthewcroughan:defenestrate.itmatthewcroughanhttps://brainmelter.brockman.news/14:32:20
@matthewcroughan:defenestrate.itmatthewcroughanSpecifically I'm not, I'm failing14:32:40
@matthewcroughan:defenestrate.itmatthewcroughanonly the html web page on 8000 is working, the stream doesn't14:32:51
@n4ch723hr3r:nope.chatn4ch723hr3rwtf is that audio14:32:59
@matthewcroughan:defenestrate.itmatthewcroughanhttps://github.com/krebs/brainmelter/tree/main14:33:13
@matthewcroughan:defenestrate.itmatthewcroughanWait so once again, if I'm gonna use HLS, what am I using instead of icecast?14:34:03
@n4ch723hr3r:nope.chatn4ch723hr3rFFMPeg?14:34:25

Show newer messages


Back to Room ListRoom Version: 6