diff --git a/machine/empyrean/default.nix b/machine/empyrean/default.nix
index bf9773f..8f0da52 100644
--- a/machine/empyrean/default.nix
+++ b/machine/empyrean/default.nix
@@ -11,6 +11,7 @@
       #./amanuensis.nix
       ./catacomb.nix
       ./gitea.nix
+      ./icecast.nix
       ./sync-pipeline.nix
     ];
 
diff --git a/machine/empyrean/icecast.nix b/machine/empyrean/icecast.nix
new file mode 100644
index 0000000..db4532f
--- /dev/null
+++ b/machine/empyrean/icecast.nix
@@ -0,0 +1,30 @@
+{
+  ...
+}:
+let
+  icecast-nix = builtins.fetchGit {
+    url = "https://github.com/Jaculabilis/icecast.nix.git";
+    ref = "master";
+    rev = "fcdff3d46e6aad6328eae19e482bebe224a6be29";
+  };
+in
+{
+  imports = [ "${icecast-nix}/module.nix" ];
+
+  services.icecast = {
+    enable = true;
+    listen.address = "10.22.20.1";
+    listen.port = 8688;
+    secretsFile = "/etc/icecast";
+    extraConf = ''
+      <location>empyrean</location>
+      <admin>tvb</admin>
+
+      <authentication>
+        <source-password>@@SOURCE_PASSWORD@@</source-password>
+      </authentication>
+    '';
+  };
+
+  networking.firewall.allowedTCPPorts = [ 8688 ];
+}