gonic
A lightweight Go server that implements the Subsonic API, so existing Subsonic apps can stream and browse your music collection.
gonic at a glance
What is gonic?
gonic serves a music collection to any app that understands the Subsonic API; its README lists clients it has been tested with, among them Symfonium, DSub, Amperfy and Ultrasonic. You can browse by folder, keeping the directory tree intact, or by tags read with taglib. With ffmpeg installed it transcodes and caches audio on the fly. Other features include podcasts, a jukebox mode for gapless playback on the server itself, multi-value genre and artist tags, several music folders, and scrobbling to Last.fm and ListenBrainz. Each user keeps separate playlists and transcoding preferences, and a small web page handles setup.
Good fit if
- You already like a Subsonic client and only need a server behind it.
- The server is a Raspberry Pi or similar small board and has to stay light.
- Your library is organised in folders and you want to browse it that way.
Before you adopt it
gonic is GPL-3.0, and the repository has no paid parts. One developer on a personal account wrote about four fifths of the commits in the last 90 days. You can install from source, run the Docker image, set it up as a systemd service, or take one of the release binaries for Linux, macOS or Windows. It is configured with environment variables or command-line flags, and the first login is admin/admin, which you should change right away.
Drafted with AI from the project's README and repository data, then checked against that data on 7 November 2026. Report a correction
How to run gonic yourself
One-click install
- YunoHost
- Unraid
Not listed in Umbrel, TrueNAS, CasaOS, Runtipi, Proxmox VE Helper-Scripts and Coolify. Checked against each panel’s app catalog on 12 November 2026.
Ways to install
- Docker files
- Dockerfile or compose file in the repository
- Docker image
- sentriz/gonic: 2.2M pulls · x86-64, ARMv6, ARMv7, ARM64 · 179 MB downloadAlso ghcr.io/sentriz/gonic
- Compose file
- None in the repository
- Setup effort
- Not rated: no compose file to judge from
- Kubernetes
- No Helm chart in the repository
- Packages
- AUR, Alpine, Void, Nix, FreeBSD and OpenBSD versions on Repology
- Desktop and mobile
- Builds for Linux, macOS, Windows, including ARM in GitHub releases
- Interface languages
- English only
Install instructions: web.libera.chat or the README on GitHub. Docker images and packages are checked weekly.
gonic health: is it still maintained?
65 of 100, actively developed
Read from GitHub on 12 November 2026. How the score works
gonic security
Security advisories are the vulnerabilities the maintainers disclosed on GitHub, with the versions that fix them; many advisories can mean careful disclosure as much as weak code. OpenSSF Scorecard checks how a project is developed and released: reviews, protected branches, pinned dependencies, signed releases. It does not audit the code itself.
Latest advisories
- startScan endpoint accessible to any authenticated user
- Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR)
- Path traversal in getPlaylist/deletePlaylist bypasses ownership check: any authenticated user can read or delete any other user's playlist
What each Scorecard check found
- Binary files10 / 10No compiled binaries checked into the repository
- Dangerous workflows10 / 10No risky patterns in GitHub Actions
- Fuzzing10 / 10The code is fuzz-tested
- License file10 / 10A license file is present
- Maintained10 / 10Steady commits and issue activity in the last 90 days
- Packaging10 / 10Releases are published as packages from CI
- Code review1 / 10Some changes are merged without review
- Best-practices badge0 / 10No OpenSSF Best Practices badge
- Branch protection0 / 10The main branch has no protection rules
- Pinned dependencies0 / 10Dependencies are not pinned to fixed versions
- Security policy0 / 10No security policy
- Signed releases0 / 10Releases are not signed
- Static analysis0 / 10No static analysis found
- Token permissions0 / 10CI tokens have broad write rights
Advisories read from GitHub on 12 November 2026. From the OpenSSF Scorecard of 26 October 2026; checks that do not apply to gonic are left out.
gonic license: is it open source?
gonic uses GPL-3.0, an open-source license approved by the OSI.
- March 2019First published on GitHub.
- TodayGPL-3.0.
gonic for developers
Written in
- Go 95%
- Go Template 5%
- Dockerfile <1%
- CSS <1%
- JavaScript <1%
Getting involved
Language shares are GitHub’s count of the code in the repository.
Alternatives to gonic
- NavidromeYour Personal Streaming Service 79 health · GPL-3.0 · 24.7k stars
- Black CandyA self hosted music streaming server 49 health · MIT · 4.4k stars
- Beetsmusic library manager and MusicBrainz tagger 83 health · MIT · 15.9k stars
- AudiobookshelfSelf-hosted audiobook and podcast server 81 health · GPL-3.0 · 15k stars
- MediaMTXReady-to-use Media-over-QUIC / SRT / WebRTC / RTSP / RTMP / LL-HLS / MPEG-TS / RTP live media server and… 76 health · MIT · 20.7k stars
Questions about gonic
Is gonic open source?
Yes. gonic is published under GPL-3.0, an OSI-approved open-source license.
Is gonic still maintained?
Its health score is 65 of 100 (actively developed). It had 33 commits in the last 90 days, the latest on 12 November 2026, and its latest release came out on 22 October 2026.
How do I run gonic?
You can run it with the Docker image sentriz/gonic, as an app for Linux, macOS, Windows, including ARM and in one click from YunoHost and Unraid. The README on GitHub has the exact steps.
What is gonic written in?
gonic is written mainly in Go (95% of the code), by GitHub’s count of the repository.
What are the alternatives to gonic?
Close alternatives in the Media servers & streaming category include Navidrome, Black Candy, Beets.