Black Candy on Ubuntu 24.04 LTS by cloudimg
by cloudimg
Self hosted music streaming server, secure by default, on Ubuntu 24.04 by cloudimg
Black Candy is a free and open source, MIT licensed self hosted music streaming server (Ruby on Rails). Point it at a folder of your own audio files and it scans the metadata to build a browsable, streamable library of artists, albums, songs and playlists, served to a clean web player and a token authenticated JSON API for companion apps, with on the fly transcoding via ffmpeg.
This cloudimg image builds Black Candy v3.2.0 from source (Ruby 4.0.2) and runs it behind nginx as a hardened appliance. Secure by default: the upstream project seeds a well known default administrator account and regenerates its signing key on every restart — this image never creates that default account, and instead generates a persistent per VM signing secret and a per VM admin account with a random password on first boot, written to a root only file. Nothing usable is baked into the image and no two instances share a secret. The application binds to loopback behind a single nginx front door on port 80, login is required for all content, and a demo track is pre loaded so the library is never empty.
What you get: Black Candy v3.2.0 built from source; Ruby 4.0.2; SQLite databases with background jobs run in process (no Redis, no PostgreSQL); ffmpeg transcoding and libvips cover art; a per VM admin and signing secret generated at first boot; Ubuntu 24.04 LTS patched at build; and 24/7 cloudimg support.
Full deployment guide: https://www.cloudimg.co.uk/guides/black-candy-on-ubuntu-24-04-azure/