Initial commit
This commit is contained in:
commit
906e1abd06
GPG key ID:
C19B924C0CD13341
4 changed files with 274 additions and 0 deletions
15
defaults/main.yml
Normal file
15
defaults/main.yml
Normal file
|
|
@ -0,0 +1,15 @@
|
|||
icecast2:
|
||||
location: Earth
|
||||
admin: icemaster@localhost
|
||||
hostname: localhost
|
||||
max_clients: 100
|
||||
max_sources: 10
|
||||
#source_password: TODO
|
||||
#relay_password: TODO
|
||||
admin_user: admin
|
||||
#admin_password: TODO
|
||||
listen_sockets:
|
||||
- port: 8000
|
||||
ssl_certificate: /usr/share/icecast2/icecast.pem
|
||||
http_headers:
|
||||
Access-Control-Allow-Origin: '*'
|
||||
5
handlers/main.yml
Normal file
5
handlers/main.yml
Normal file
|
|
@ -0,0 +1,5 @@
|
|||
- name: Restart icecast2
|
||||
ansible.builtin.systemd_service:
|
||||
name: icecast2
|
||||
state: restarted
|
||||
enabled: yes
|
||||
19
tasks/main.yml
Normal file
19
tasks/main.yml
Normal file
|
|
@ -0,0 +1,19 @@
|
|||
- name: Install icecast2
|
||||
ansible.builtin.apt:
|
||||
pkg:
|
||||
- icecast2
|
||||
|
||||
- name: Add icecast2 to ssl-cert group
|
||||
user:
|
||||
name: icecast2
|
||||
groups: ssl-cert
|
||||
append: yes
|
||||
|
||||
- name: Update config
|
||||
ansible.builtin.template:
|
||||
src: icecast.xml.j2
|
||||
dest: /etc/icecast2/icecast.xml
|
||||
owner: root
|
||||
group: icecast
|
||||
mode: "0640"
|
||||
notify: Restart icecast2
|
||||
235
templates/icecast.xml.j2
Normal file
235
templates/icecast.xml.j2
Normal file
|
|
@ -0,0 +1,235 @@
|
|||
<icecast>
|
||||
<!-- location and admin are two arbitrary strings that are e.g. visible
|
||||
on the server info page of the icecast web interface
|
||||
(server_version.xsl). -->
|
||||
<location>{{ icecast2.location }}</location>
|
||||
<admin>{{ icecast2.admin }}</admin>
|
||||
|
||||
<!-- IMPORTANT!
|
||||
Especially for inexperienced users:
|
||||
Start out by ONLY changing all passwords and restarting Icecast.
|
||||
For detailed setup instructions please refer to the documentation.
|
||||
It's also available here: http://icecast.org/docs/
|
||||
-->
|
||||
|
||||
<limits>
|
||||
<clients>{{ icecast2.max_clients }}</clients>
|
||||
<sources>{{ icecast2.max_sources }}</sources>
|
||||
<queue-size>524288</queue-size>
|
||||
<client-timeout>30</client-timeout>
|
||||
<header-timeout>15</header-timeout>
|
||||
<source-timeout>10</source-timeout>
|
||||
<!-- If enabled, this will provide a burst of data when a client
|
||||
first connects, thereby significantly reducing the startup
|
||||
time for listeners that do substantial buffering. However,
|
||||
it also significantly increases latency between the source
|
||||
client and listening client. For low-latency setups, you
|
||||
might want to disable this. -->
|
||||
<burst-on-connect>1</burst-on-connect>
|
||||
<!-- same as burst-on-connect, but this allows for being more
|
||||
specific on how much to burst. Most people won't need to
|
||||
change from the default 64k. Applies to all mountpoints -->
|
||||
<burst-size>65535</burst-size>
|
||||
</limits>
|
||||
|
||||
<authentication>
|
||||
<!-- Sources log in with username 'source' -->
|
||||
<source-password>{{ icecast2.source_password }}</source-password>
|
||||
<!-- Relays log in with username 'relay' -->
|
||||
<relay-password>{{ icecast2.relay_password }}</relay-password>
|
||||
|
||||
<!-- Admin logs in with the username given below -->
|
||||
<admin-user>{{ icecast2.admin_user }}</admin-user>
|
||||
<admin-password>{{ icecast2.admin_password }}</admin-password>
|
||||
</authentication>
|
||||
|
||||
<!-- set the mountpoint for a shoutcast source to use, the default if not
|
||||
specified is /stream but you can change it here if an alternative is
|
||||
wanted or an extension is required
|
||||
<shoutcast-mount>/live.nsv</shoutcast-mount>
|
||||
-->
|
||||
|
||||
<!-- Uncomment this if you want directory listings -->
|
||||
<!--
|
||||
<directory>
|
||||
<yp-url-timeout>15</yp-url-timeout>
|
||||
<yp-url>http://dir.xiph.org/cgi-bin/yp-cgi</yp-url>
|
||||
</directory>
|
||||
-->
|
||||
|
||||
<!-- This is the hostname other people will use to connect to your server.
|
||||
It affects mainly the urls generated by Icecast for playlists and yp
|
||||
listings. You MUST configure it properly for YP listings to work!
|
||||
-->
|
||||
<hostname>{{ icecast2.hostname }}</hostname>
|
||||
|
||||
<!-- You may have multiple <listen-socket> elements -->
|
||||
{% for listen_socket in icecast2.listen_sockets %}
|
||||
<listen-socket>
|
||||
{% for key, value in listen_socket.items() %}
|
||||
<{{ key }}>{{ value }}</{{ key }}>
|
||||
{% endfor %}
|
||||
</listen-socket>
|
||||
{% endfor %}
|
||||
|
||||
<!-- Global header settings
|
||||
Headers defined here will be returned for every HTTP request to Icecast.
|
||||
|
||||
The ACAO header makes Icecast public content/API by default
|
||||
This will make streams easier embeddable (some HTML5 functionality needs it).
|
||||
Also it allows direct access to e.g. /status-json.xsl from other sites.
|
||||
If you don't want this, comment out the following line or read up on CORS.
|
||||
-->
|
||||
<http-headers>
|
||||
{% for key, value in icecast2.http_headers.items() %}
|
||||
<header name="{{ key }}" value="{{ value }}" />
|
||||
{% endfor %}
|
||||
</http-headers>
|
||||
|
||||
|
||||
<!-- Relaying
|
||||
You don't need this if you only have one server.
|
||||
Please refer to the documentation for a detailed explanation.
|
||||
-->
|
||||
<!--<master-server>127.0.0.1</master-server>-->
|
||||
<!--<master-server-port>8001</master-server-port>-->
|
||||
<!--<master-update-interval>120</master-update-interval>-->
|
||||
<!--<master-password>hackme</master-password>-->
|
||||
|
||||
<!-- setting this makes all relays on-demand unless overridden, this is
|
||||
useful for master relays which do not have <relay> definitions here.
|
||||
The default is 0 -->
|
||||
<!--<relays-on-demand>1</relays-on-demand>-->
|
||||
|
||||
<!--
|
||||
<relay>
|
||||
<server>127.0.0.1</server>
|
||||
<port>8080</port>
|
||||
<mount>/example.ogg</mount>
|
||||
<local-mount>/different.ogg</local-mount>
|
||||
<on-demand>0</on-demand>
|
||||
|
||||
<relay-shoutcast-metadata>0</relay-shoutcast-metadata>
|
||||
</relay>
|
||||
-->
|
||||
|
||||
|
||||
<!-- Mountpoints
|
||||
Only define <mount> sections if you want to use advanced options,
|
||||
like alternative usernames or passwords
|
||||
-->
|
||||
|
||||
<!-- Default settings for all mounts that don't have a specific <mount type="normal">.
|
||||
-->
|
||||
<!--
|
||||
<mount type="default">
|
||||
<public>0</public>
|
||||
<intro>/server-wide-intro.ogg</intro>
|
||||
<max-listener-duration>3600</max-listener-duration>
|
||||
<authentication type="url">
|
||||
<option name="mount_add" value="http://auth.example.org/stream_start.php"/>
|
||||
</authentication>
|
||||
<http-headers>
|
||||
<header name="foo" value="bar" />
|
||||
</http-headers>
|
||||
</mount>
|
||||
-->
|
||||
|
||||
<!-- Normal mounts -->
|
||||
<!--
|
||||
<mount type="normal">
|
||||
<mount-name>/example-complex.ogg</mount-name>
|
||||
|
||||
<username>othersource</username>
|
||||
<password>hackmemore</password>
|
||||
|
||||
<max-listeners>1</max-listeners>
|
||||
<dump-file>/tmp/dump-example1.ogg</dump-file>
|
||||
<burst-size>65536</burst-size>
|
||||
<fallback-mount>/example2.ogg</fallback-mount>
|
||||
<fallback-override>1</fallback-override>
|
||||
<fallback-when-full>1</fallback-when-full>
|
||||
<intro>/example_intro.ogg</intro>
|
||||
<hidden>1</hidden>
|
||||
<public>1</public>
|
||||
<authentication type="htpasswd">
|
||||
<option name="filename" value="myauth"/>
|
||||
<option name="allow_duplicate_users" value="0"/>
|
||||
</authentication>
|
||||
<http-headers>
|
||||
<header name="Access-Control-Allow-Origin" value="http://webplayer.example.org" />
|
||||
<header name="baz" value="quux" />
|
||||
</http-headers>
|
||||
<on-connect>/home/icecast/bin/stream-start</on-connect>
|
||||
<on-disconnect>/home/icecast/bin/stream-stop</on-disconnect>
|
||||
</mount>
|
||||
-->
|
||||
|
||||
<!--
|
||||
<mount type="normal">
|
||||
<mount-name>/auth_example.ogg</mount-name>
|
||||
<authentication type="url">
|
||||
<option name="mount_add" value="http://myauthserver.net/notify_mount.php"/>
|
||||
<option name="mount_remove" value="http://myauthserver.net/notify_mount.php"/>
|
||||
<option name="listener_add" value="http://myauthserver.net/notify_listener.php"/>
|
||||
<option name="listener_remove" value="http://myauthserver.net/notify_listener.php"/>
|
||||
<option name="headers" value="x-pragma,x-token"/>
|
||||
<option name="header_prefix" value="ClientHeader."/>
|
||||
</authentication>
|
||||
</mount>
|
||||
-->
|
||||
|
||||
<fileserve>1</fileserve>
|
||||
|
||||
<paths>
|
||||
<!-- basedir is only used if chroot is enabled -->
|
||||
<basedir>/usr/share/icecast2</basedir>
|
||||
|
||||
<!-- Note that if <chroot> is turned on below, these paths must both
|
||||
be relative to the new root, not the original root -->
|
||||
<logdir>/var/log/icecast2</logdir>
|
||||
<webroot>/usr/share/icecast2/web</webroot>
|
||||
<adminroot>/usr/share/icecast2/admin</adminroot>
|
||||
<!-- <pidfile>/usr/share/icecast2/icecast.pid</pidfile> -->
|
||||
|
||||
<!-- Aliases: treat requests for 'source' path as being for 'dest' path
|
||||
May be made specific to a port or bound address using the "port"
|
||||
and "bind-address" attributes.
|
||||
-->
|
||||
<!--
|
||||
<alias source="/foo" destination="/bar"/>
|
||||
-->
|
||||
<!-- Aliases: can also be used for simple redirections as well,
|
||||
this example will redirect all requests for http://server:port/ to
|
||||
the status page
|
||||
-->
|
||||
<alias source="/" destination="/status.xsl"/>
|
||||
<!-- The certificate file needs to contain both public and private part.
|
||||
Both should be PEM encoded. -->
|
||||
<ssl-certificate>{{ icecast2.ssl_certificate }}</ssl-certificate>
|
||||
</paths>
|
||||
|
||||
<logging>
|
||||
<accesslog>access.log</accesslog>
|
||||
<errorlog>error.log</errorlog>
|
||||
<!-- <playlistlog>playlist.log</playlistlog> -->
|
||||
<loglevel>3</loglevel> <!-- 4 Debug, 3 Info, 2 Warn, 1 Error -->
|
||||
<logsize>10000</logsize> <!-- Max size of a logfile -->
|
||||
<!-- If logarchive is enabled (1), then when logsize is reached
|
||||
the logfile will be moved to [error|access|playlist].log.DATESTAMP,
|
||||
otherwise it will be moved to [error|access|playlist].log.old.
|
||||
Default is non-archive mode (i.e. overwrite)
|
||||
-->
|
||||
<!-- <logarchive>1</logarchive> -->
|
||||
</logging>
|
||||
|
||||
<security>
|
||||
<chroot>0</chroot>
|
||||
<!--
|
||||
<changeowner>
|
||||
<user>nobody</user>
|
||||
<group>nogroup</group>
|
||||
</changeowner>
|
||||
-->
|
||||
</security>
|
||||
</icecast>
|
||||
Loading…
Add table
Add a link
Reference in a new issue