How to Enable the Port 80 Proxy in Centova Cast, Step by Step (set_secure and Legacy setproxy)

Updated: 8 October 2026 · Applies to: Centova Cast 3.2.14 to 3.3.4 (from Centova documentation); port check tested with ss (iproute2 6.15) on Debian 13

To enable the port 80 proxy on a current Centova Cast server, log in as root and run /usr/local/centovacast/sbin/set_secure --fqdn=radio.example.com --email=you@example.com, then allow the proxy for each stream on the account's Limits tab. Since version 3.2.14 Centova calls it the stream proxy, and this one command sets up ports 80 and 443, the proxy and a Let's Encrypt certificate. What the proxy does is explained in does Centova Cast include a proxy for port 80 and HTTPS; this article is only the procedure.

Before you start

1. Root access to the Centova Cast server. If you only have a stream account, ask your host to enable the proxy for you.
2. A current version. Update first with /usr/local/centovacast/sbin/update (see centova update command). The set_secure script arrived in 3.2.14, so ls /usr/local/centovacast/sbin/set_secure shows whether you have it.
3. A hostname that points to the server, such as radio.example.com, because the certificate is issued for it.
4. Ports 80 and 443 free on that IP address. According to Centova, no other web server may use the address the proxy runs on. Check what is listening:

   ss -ltnp '( sport = :80 or sport = :443 )'

   In our test container an nginx was already on port 80, and ss showed it:

   State  Recv-Q Send-Q Local Address:Port Peer Address:PortProcess
   LISTEN 0      511        127.0.0.1:80        0.0.0.0:*    users:(("nginx",pid=7189,fd=10))

   Any line like this means another web server is in the way. Remove it, or move it to a second IP address and give Centova Cast the other address with --bind=IP in the next step.

Enable the proxy

1. Run, with your own hostname and email address:

   /usr/local/centovacast/sbin/set_secure --fqdn=radio.example.com --email=you@example.com

   With a second IP address, add --bind=203.0.113.20 (the address Centova Cast should use).
2. If set_secure stops with an error (Centova says this can happen after changes to its configuration files), run the steps one by one:

   /usr/local/centovacast/sbin/set_web_ports --fqdn=radio.example.com
   systemctl restart centovacast
   /usr/local/centovacast/sbin/set_proxy --on
   /usr/local/centovacast/sbin/set_ssl_cert letsencrypt radio.example.com you@example.com
   systemctl restart centovacast

   To use your own certificate instead of Let's Encrypt, see set_ssl_cert --help.
3. Check that the web ports are active:

   grep -n listen /usr/local/centovacast/etc/cc-panel.conf

   According to Centova, an installation with the proxy enabled shows listen 2199 default ssl;, listen 80; and listen 443 ssl;. Port 2199 alone means the web ports are not enabled yet. Your control panel stays on port 2199 either way.
4. Open TCP 80 and 443 in the server firewall. With firewalld:

   firewall-cmd --permanent --add-port=80/tcp
   firewall-cmd --permanent --add-port=443/tcp
   firewall-cmd --reload

   Other firewalls: configuring a firewall for Centova Cast.
5. Allow the proxy per stream. In the admin area, click Manage under Accounts, click the account's username, open the Limits tab and allow Port 80 proxy, then save the account. Centova's manual uses this label and notes that the option only appears once the proxy is enabled on the server.

The stream's Quick Links page then shows the proxy tune-in links. How listeners tune in through the port 80 proxy covers sharing and testing them.

Legacy method (before 3.2.14)

Older versions used /usr/local/centovacast/sbin/setproxy on followed by /etc/init.d/centovacast restart, with the proxy's IP address set in /usr/local/centovacast/etc/web.d/cc-proxy.conf. Centova keeps those instructions for old installations only. Update instead: the current version adds HTTPS stream proxying, which the old method does not set up.

If it does not work

• No Port 80 proxy option on the Limits tab: the proxy is not enabled on the server yet; repeat the steps above.
• The certificate step fails: check that the hostname resolves to this server and that ports 80 and 443 are open. See also Let's Encrypt with Centova Cast.
• Proxy links do not play: follow the checks in how listeners tune in through the port 80 proxy.

Streams hosted with Ucartz

On Shoutcast and Icecast hosting or a Shoutcast reseller account, open a support ticket and ask for proxy access on your stream. On a Centova Cast dedicated server you can run the steps yourself as root or open a ticket for help.

Official documentation: Centova: stream proxy, old proxy instructions, third-party web servers and Limits tab.