From 49975f8f60c22e301178f208774f8b55ac581c6b Mon Sep 17 00:00:00 2001
From: mcguirepr89 <mcguirepr89@gmail.com>
Date: Tue, 5 Jul 2022 11:44:14 -0400
Subject: [PATCH] making icecast2 more secure by default

---
 scripts/install_services.sh        | 2 ++
 scripts/update_birdnet_snippets.sh | 3 +++
 2 files changed, 5 insertions(+)

diff --git a/scripts/install_services.sh b/scripts/install_services.sh
index 3d99e9b..3f5eec3 100755
--- a/scripts/install_services.sh
+++ b/scripts/install_services.sh
@@ -379,6 +379,8 @@ config_icecast() {
   for i in "${passwords[@]}";do
   sed -i "s/<${i}password>.*<\/${i}password>/<${i}password>${ICE_PWD}<\/${i}password>/g" /etc/icecast2/icecast.xml
   done
+  sed -i 's|<!-- <bind-address>.*|<bind-address>127.0.0.1</bind-address>|;s|<!-- <shoutcast-mount>.*|<shoutcast-mount>/stream</shoutcast-mount>|'
+
   systemctl enable icecast2.service
 }
 
diff --git a/scripts/update_birdnet_snippets.sh b/scripts/update_birdnet_snippets.sh
index 59604b2..de95c67 100755
--- a/scripts/update_birdnet_snippets.sh
+++ b/scripts/update_birdnet_snippets.sh
@@ -107,6 +107,9 @@ if ! grep '\-\-browser.gatherUsageStats false' $HOME/BirdNET-Pi/templates/birdne
   sudo systemctl daemon-reload && restart_services.sh
 fi
 
+# Make IceCast2 a little more secure
+sudo sed -i 's|<!-- <bind-address>.*|<bind-address>127.0.0.1</bind-address>|;s|<!-- <shoutcast-mount>.*|<shoutcast-mount>/stream</shoutcast-mount>|' /etc/icecast2/icecast.xml
+sudo systemctl restart icecast2
 
 sudo systemctl daemon-reload
 restart_services.sh