TinyIce keeps all state in a single JSON file, tinyice.json (override the path with -config). The setup wizard writes a minimal working file on first run; most settings are also editable from the admin UI, which writes back to the same file.

• Atomic writes. Saves go to tinyice.json.tmp then rename(2) into place, serialised by a process-wide lock so concurrent admin/API/background writes can't shred the file.
• Hot reload. ./tinyice reload (or kill -HUP <pid>) re-reads the file without dropping listeners — mounts, passwords, relays, and UI settings are re-synced. See Command Line and Signals.
• Secrets are hashed. Admin, source, and mount passwords are stored as bcrypt hashes (cost 12). You cannot read a password back out of the file.

Inspect the effective config any time with ./tinyice dump-config.

{
 "bind_host": "0.0.0.0",
 "port": "8000",
 "base_url": "https://radio.example.com",
 "page_title": "My Radio",
 "page_subtitle": "Broadcasting 24/7",
 "accent_color": "#ff6600",
 "max_listeners": 100,
 "directory_listing": true,
 "ingest": { "rtmp_enabled": true, "rtmp_port": "1935" },
 "trusted_proxies": ["127.0.0.1", "10.0.0.0/8"],
 "autodjs": [
 {
 "name": "24/7 Chill", "mount": "/chill",
 "music_dir": "/music/chill", "format": "mp3", "bitrate": 128,
 "enabled": true, "loop": true, "inject_metadata": true
 }
 ]
}

{
 "use_https": true, "auto_https": true,
 "port": "80", "https_port": "443",
 "domains": ["radio.example.com"], "acme_email": "admin@example.com"
}

Ports 80/443 must be reachable for ACME challenges. Web browsers are redirected to HTTPS; plain-HTTP encoders (most hardware) keep working on the HTTP port. See Deployment.

Mounts can be created implicitly by a source connecting, or pre-declared. Three maps cover the common per-mount toggles, plus an advanced settings map:

MountSettings.name_override, when set, replaces the source's Ice-Name on metadata update — rebrand a station server-side without touching the encoder. Default burst size is 512 KB (the "instant start" buffer); raising it lowers startup latency at a small memory cost.

"ingest": {
 "rtmp_enabled": true, "rtmp_port": "1935",
 "srt_enabled": true, "srt_port": "9000", "srt_latency": 120
}

Both are off by default. Icecast SOURCE/PUT and WebRTC ingest need no ingest config. Details in Streaming Sources.

autodjs is a list of independent file-based stations. Full reference in AutoDJ.

song_command / on_play_command run via sh -c as the service user. Creating or editing an AutoDJ requires the superadmin role for exactly this reason — see Security.

Full model and flows in Authentication and Users.

multi_tenant (enabled, default_tenant, tenant_store) is present in the schema for hosting multiple logical stations. It is early-stage; single-tenant is the supported path today.

Most keys have a CLI shortcut: ./tinyice get <key> and ./tinyice set <key> <value>. See Command Line and Signals.