chore: use a secure dev environment

dev/config.yml

@@ -31,6 +31,7 @@ stream:
       - <<: *default_icecast_output
         enabled: true
         mount: main.ogg
+        public_url: https://localhost:8443/main.ogg
         audio:
           format: ogg
           bitrate: 256
@@ -38,6 +39,7 @@ stream:
       - <<: *default_icecast_output
         enabled: true
         mount: main.opus
+        public_url: https://localhost:8443/main.opus
         audio:
           format: opus
           bitrate: 256
@@ -45,6 +47,7 @@ stream:
       - <<: *default_icecast_output
         enabled: true
         mount: main.mp3
+        public_url: https://localhost:8443/main.mp3
         audio:
           format: mp3
           bitrate: 256

dev/icecast.xml

@@ -0,0 +1,61 @@
+<icecast>
+    <location>Earth</location>
+    <admin>icemaster@localhost</admin>
+
+    <limits>
+        <clients>100</clients>
+        <sources>10</sources>
+        <queue-size>524288</queue-size>
+        <client-timeout>30</client-timeout>
+        <header-timeout>15</header-timeout>
+        <source-timeout>10</source-timeout>
+        <burst-on-connect>1</burst-on-connect>
+        <burst-size>65535</burst-size>
+    </limits>
+
+    <authentication>
+        <source-password>hackme</source-password>
+        <relay-password>hackme</relay-password>
+        <admin-user>admin</admin-user>
+        <admin-password>hackme</admin-password>
+    </authentication>
+
+    <hostname>localhost</hostname>
+
+    <listen-socket>
+        <port>8000</port>
+    </listen-socket>
+    <listen-socket>
+        <port>8443</port>
+        <ssl>1</ssl>
+    </listen-socket>
+
+    <http-headers>
+        <header name="Access-Control-Allow-Origin" value="*" />
+    </http-headers>
+
+    <fileserve>1</fileserve>
+
+    <paths>
+        <basedir>/usr/share/icecast</basedir>
+
+        <logdir>/var/log/icecast</logdir>
+        <webroot>/usr/share/icecast/web</webroot>
+        <adminroot>/usr/share/icecast/admin</adminroot>
+
+        <alias source="/" destination="/status.xsl" />
+
+        <ssl-certificate>/certs/fake.pem</ssl-certificate>
+    </paths>
+
+    <logging>
+        <accesslog>access.log</accesslog>
+        <errorlog>-</errorlog>
+        <loglevel>3</loglevel>
+        <logsize>10000</logsize>
+    </logging>
+
+    <security>
+        <chroot>0</chroot>
+    </security>
+</icecast>