diff --git a/common/server/icecast.nix b/common/server/icecast.nix
index 9344282..657f8d0 100644
--- a/common/server/icecast.nix
+++ b/common/server/icecast.nix
@@ -11,29 +11,31 @@ in {
   };
 
   config = lib.mkIf cfg.enable {
-    listen.address = "127.0.0.1";
-    admin.password = "hackme";
-    extraConf = ''
-      <authentication>
-        <source-password>hackme</source-password>
-      </authentication>
-      <http-headers>
-        <header type="cors" name="Access-Control-Allow-Origin" />
-      </http-headers>
-      <mount type="normal">
-        <mount-name>/${cfg.mount}</mount-name>
-        <max-listeners>20</max-listeners>
-        <burst-size>65536</burst-size>
-        <hidden>false</hidden>
-        <public>false</public>
-      </mount>
-    '';
-  };
-  services.nginx.virtualHosts.${cfg.hostname} = {
-    enableACME = true;
-    forceSSL = true;
-    locations."/${cfg.mount}" = {
-      proxyPass = "http://localhost:${toString cfg.listen.port}/${cfg.mount}";
+    services.icecast = {
+      listen.address = "127.0.0.1";
+      admin.password = "hackme";
+      extraConf = ''
+        <authentication>
+          <source-password>hackme</source-password>
+        </authentication>
+        <http-headers>
+          <header type="cors" name="Access-Control-Allow-Origin" />
+        </http-headers>
+        <mount type="normal">
+          <mount-name>/${cfg.mount}</mount-name>
+          <max-listeners>20</max-listeners>
+          <burst-size>65536</burst-size>
+          <hidden>false</hidden>
+          <public>false</public>
+        </mount>
+      '';
+    };
+    services.nginx.virtualHosts.${cfg.hostname} = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/${cfg.mount}" = {
+        proxyPass = "http://localhost:${toString cfg.listen.port}/${cfg.mount}";
+      };
     };
   };
 }