On July 19, 2026, we successfully completed a major maintenance and upgrade operation on the Fspirits AzuraCast streaming server.
The platform was upgraded from AzuraCast 0.23.2 Stable to 0.23.7 Stable, including updates to Docker, Docker Compose, Liquidsoap and the supporting AzuraCast services.
All 14 hosted radio stations were restarted successfully and tested after the upgrade. Icecast and Shoutcast broadcasting, public station pages, secure stream links, metadata and administration services are now operating normally.
Maintenance performed on the Fspirits streaming server
The following operations were completed:
- Created a complete pre-update AzuraCast backup.
- Updated the official AzuraCast Docker utility script.
- Checked and updated the Docker installation.
- Checked and updated Docker Compose.
- Upgraded AzuraCast from version 0.23.2 to 0.23.7 Stable.
- Downloaded and deployed the latest stable AzuraCast Docker images.
- Applied all required database migrations.
- Applied updated system and container configurations.
- Updated the AzuraCast web application and supporting services.
- Updated Liquidsoap to version 2.4.5.
- Rebuilt and restarted the AzuraCast containers.
- Cleared unplayed station queues during the controlled update process.
- Restarted all 14 hosted radio stations.
- Removed obsolete Docker containers and images after the successful update.
- Enabled the AzuraCast web proxy for radio streaming.
- Restored secure Icecast stream access through standard HTTPS port 443.
- Restored Icecast public station pages.
- Restored playback through embedded and browser-based players.
- Verified the AzuraCast administration interface.
- Verified Icecast and Shoutcast station operation.
- Confirmed that current-song metadata and listener information are updating.
- Confirmed that the server remains on the Stable release channel.
Icecast streaming and public-page repair
Before the maintenance, Icecast stations were internally broadcasting, but their public pages and direct stream links were inaccessible. Browsers returned ERR_EMPTY_RESPONSE when attempting to access Icecast streams through their individual HTTPS broadcasting ports.
The AzuraCast web proxy was enabled to route radio streams securely through standard web ports 80 and 443.
Station stream addresses now use the secure format:
https://aphrodite.freespirits.gr/listen/station-name/radio.mp3
This replaces direct station-port addresses such as:
https://aphrodite.freespirits.gr:8030/radio.mp3
This configuration offers several advantages:
- Secure HTTPS audio streaming
- Improved browser compatibility
- Better compatibility with embedded players
- No requirement for listeners to access non-standard ports
- Improved compatibility with firewalls and corporate networks
- Easier integration with websites and mobile applications
- More reliable operation with Cloudflare and reverse proxies
- Centralised SSL certificate handling
- Reduced exposure of individual station broadcasting ports
AzuraCast 0.23.7 improvements
AzuraCast 0.23.7 introduced several important stability and performance improvements.
Liquidsoap 2.4.5
Liquidsoap, the AutoDJ and audio automation engine used by AzuraCast, was upgraded to version 2.4.5.
This version includes fixes for CPU and RAM consumption problems that could appear after radio stations operated continuously for long periods. This is particularly valuable for a multi-station server running 24 hours a day.
HLS access-control improvements
Country and IP-based allow-and-block rules now also apply to HLS streams served by AzuraCast.
Improved Smart Crossfading
Advanced users can now specify decibel thresholds directly when configuring Smart Crossfading.
Playlist visibility fix
Fixed an issue where newly created playlists did not immediately appear inside the Media Manager.
Liquidsoap configuration security
Fixed a remaining area where arbitrary strings could be inserted into generated Liquidsoap configuration.
AzuraCast 0.23.6 security fixes
Version 0.23.6 focused primarily on security improvements, especially for multi-user and multi-station hosting environments.
Safer local media uploads
Additional validation was introduced to prevent authorised users from using manipulated paths to upload files outside their assigned station media directory.
Liquidsoap internal API protection
Security around internal Liquidsoap API endpoints was strengthened. These endpoints handle operations such as DJ activation, DJ deactivation and internal feedback communication.
Media Manager API protection
Permission checks around the Media Manager playback API were improved.
Safer Liquidsoap raw strings
Raw strings included in Liquidsoap configurations are now fully escaped, reducing the possibility of unwanted commands or values being introduced into generated configurations.
Secure password-reset links
Password-reset emails now always use the configured AzuraCast Base URL. They no longer depend on the browser URL, preventing users from being redirected to an incorrect or manipulated domain.
AzuraCast 0.23.5 performance improvements
Liquidsoap 2.4.4
This intermediate release upgraded Liquidsoap to version 2.4.4, resolving several performance issues. The server was subsequently upgraded again to Liquidsoap 2.4.5 as part of AzuraCast 0.23.7.
Faster analytics processing
Database indexes used by several analytics tables were optimised. This can significantly improve reporting and statistics performance on installations containing many stations or large listener-history datasets.
AzuraCast 0.23.4 improvements
Separate Public Pages and Public APIs controls
Station administrators can now manage public station pages and public-facing APIs separately.
This allows a station to use external applications or custom website players without necessarily enabling the standard AzuraCast public page.
Liquidsoap configuration access control
A new system-wide option allows server administrators to prevent station users from editing raw Liquidsoap configuration.
This is an important improvement for multi-tenant streaming hosting because Liquidsoap configuration can access external processes and local files when unrestricted.
Improved ID3 metadata mapping
The ID3 website metadata field now maps to the url_artist custom field.
Improved Docker port definitions
The unnecessary EXPOSE 8000-8999 declaration was removed from the Docker image. This prevents development and container-management software from incorrectly assuming that every port in this range is actively used.
Hardened Liquidsoap script generation
Liquidsoap configuration generation now applies stronger string escaping, reducing risks from interpolated values or console-command execution.
Media Manager cache improvements
Cache invalidation was improved when editing media fields, ensuring that the Media Manager more accurately displays current information.
Cue-point CSV export fix
Fixed a problem that prevented custom cue points from appearing in bulk media CSV exports.
Web-proxy improvements
The port 80 web proxy was adjusted to better handle oversized cookie headers.
SFTP upload protection
Fixed an issue where large or bulk SFTP uploads could trigger a temporary IP ban.
AzuraCast 0.23.3 improvements
Super-administrator API key creation
A new API endpoint allows super administrators to create API keys for individual users.
Improved inaccessible-directory handling
When mounted storage contains directories that AzuraCast cannot access, those directories are now skipped instead of interrupting normal application operation.
Multi-station media security fix
A permission vulnerability affecting some media endpoints was resolved.
Under specific circumstances, an authenticated user associated with one station could potentially modify or add media to another station if they knew its internal station ID. The vulnerability did not permit unauthenticated public access, but the correction is especially important for multi-tenant installations.
Installation completion fix
Fixed a bug that could prevent the AzuraCast setup process from completing correctly.
Time-zone display fix
UTC offsets containing partial hours, such as UTC +6:30, are now displayed correctly in selection menus.
Final result
Following the maintenance:
- AzuraCast is running version 0.23.7 Stable.
- Liquidsoap is running version 2.4.5.
- Docker and Docker Compose meet the current AzuraCast requirements.
- All 14 hosted radio stations restarted successfully.
- Icecast and Shoutcast stations are operational.
- Icecast public pages are online.
- Secure proxied radio streams are operational.
- Browser-based audio playback is working.
- Embedded-player compatibility has been restored.
- Metadata and listener statistics are updating.
- The administration interface is accessible.
- Important multi-user security updates have been applied.
- Database and analytics performance improvements are active.
- The server remains on the recommended Stable release channel.
The Fspirits streaming infrastructure is now operating on the latest stable AzuraCast release, with improved security, performance, reliability and compatibility for both broadcasters and listeners.
Official release information: AzuraCast changelog
