stremio-server-go

stremio-server-go

A lightweight, IPv6-capable, open-source drop-in replacement for Stremio's closed-source streaming server (server.js), built on anacrolix/torrent. It serves the exact enginefs HTTP API that stremio-web expects, so it drops straight in.

Not affiliated with or endorsed by Stremio.

Features

• Dual-stack torrent engine - IPv4 + IPv6, TCP + uTP, BEP32 DHT, PEX, WebTorrent, webseeds; curated public trackers with RTT ranking + 24h refresh.
• Full enginefs API - create/stats.json/remove, Range/206 streaming with DLNA headers, network-info, device-info, settings, opensubHash, subtitlesTracks, /probe, /tracks, /list, /:ih/peers.
• HLSv2 transcoding - on-demand ffmpeg with multi-platform hardware accel (VAAPI / NVENC / QSV / VideoToolbox / V4L2M2M, verified at startup, libx264 fallback), multi-audio + embedded-subtitle renditions, and seek-aware segments.
• Subtitles - SRT / WebVTT / ASS-SSA to WebVTT, OpenSubtitles hashing.
• Reverse proxy (/proxy), DLNA casting (/casting, SSDP discovery + UPnP AVTransport control), local-files addon (/local-addon, IMDB-resolved), YouTube (/yt, via yt-dlp), and /get-https (Stremio cert provisioning).
• Archive streaming - direct playback of media inside ZIP / RAR / 7z / TAR / TGZ containers (/zip, /rar, /7zip, /tar, /tgz), plus Usenet/NZB (/nzb, NNTP + yEnc) and FTP/FTPS (/ftp) streaming - all pure-Go.
• Disk-bounded cache - LRU eviction honouring the cacheSize setting, plus idle-torrent removal after inactivity (STREMIO_TORRENT_IDLE_TIMEOUT).
• Self-signed HTTPS on :12470 for HTTPS web UIs (e.g. WebKitGTK shells).
• Metrics - GET /metrics exposes Prometheus-format gauges (goroutines, heap, active torrents, HLS sessions, proxy cache).

Install

Prebuilt binaries for Linux, macOS, Windows, and Android (arm64) are attached to each release.

From source (Go 1.26+; CGO is not required):

go install github.com/M0Rf30/stremio-server-go/cmd/stremio-server@latest
# or, in a checkout:
make build          # -> ./stremio-server
make build-all      # cross-compile every target into dist/

Container / HuggingFace

A multi-stage Dockerfile (ffmpeg + yt-dlp bundled, non-root, /data volume) builds an image runnable under Podman/Docker or as a HuggingFace Space. See docs/CONTAINER.md.

Browser-trusted HTTPS for the Stremio UI

The Stremio web app can't talk to a plaintext local server. The "HTTPS endpoint for streaming" setting provisions a browser-trusted *.stremio.rocks cert for your LAN IP via /get-https. Full setup + troubleshooting: docs/HTTPS.md.

Decentralized torrents (Bitmagnet)

The /bitmagnet add-on streams from a self-hosted Bitmagnet DHT index. A compose file and full setup guide are in docs/BITMAGNET.md.

Universal indexers (Torznab)

The /torznab add-on queries any Torznab-compatible indexer (Prowlarr, Jackett, NZBHydra2, or Bitmagnet's built-in /torznab endpoint). Setup guide: docs/TORZNAB.md.

Run

./stremio-server            # http://127.0.0.1:11470  (https on :12470)
./stremio-server version    # print build version

Then point any Stremio client's streaming server URL at http://127.0.0.1:11470.

Environment

The stream proxy (HLS/DASH manifest rewriting, on-the-fly decryption, signed URLs) is documented in docs/PROXY.md.

Censorship resistance

The server uses DHT (BEP32), PEX (BEP11), HTTP webseeds, and a ranked public tracker list, so peer discovery continues even when individual trackers are blocked. Four knobs let you harden further in censored or monitored networks:

• STREMIO_BT_ENCRYPTION=require — forces RC4 header obfuscation on every peer handshake, defeating DPI signatures that fingerprint plain BitTorrent traffic. Peers that refuse encryption are dropped.
• STREMIO_BT_PROXY — routes tracker announces, metainfo fetches, HTTP webseeds, and the tracker-list download through a SOCKS5 or HTTP proxy (e.g. socks5://127.0.0.1:9050 for Tor). Use this when your ISP blocks trackers or the tracker-list host (raw.githubusercontent.com).
• STREMIO_DHT_BOOTSTRAP — supplies alternate DHT bootstrap nodes when the default routers (router.bittorrent.com, dht.transmissionbt.com, etc.) are filtered; accepts a comma-separated host:port list appended to the defaults.
• STREMIO_BT_ANONYMOUS=1 — suppresses the client version string advertised to peers, reducing passive fingerprintability.

Example — running behind Tor:

STREMIO_BT_ENCRYPTION=require \
STREMIO_BT_PROXY=socks5://127.0.0.1:9050 \
STREMIO_BT_ANONYMOUS=1 \
stremio-server

Limitation: the proxy covers tracker/webseed/metainfo traffic only. Peer TCP/uTP connections are established through the listen socket directly and are not tunneled. For full peer anonymity a network-level VPN or transparent Tor proxy is still required; the proxy + encryption knobs primarily defeat tracker-level blocking and DPI-based fingerprinting of peer handshakes.

Platforms

CGO_ENABLED=0 everywhere, so all targets are pure-Go cross-compiles: linux/{amd64,arm64,arm}, darwin/{amd64,arm64}, windows/{amd64,arm64}, android/arm64. Android additionally builds with -ldflags=-checklinkname=0 (for github.com/wlynxg/anet on Go 1.23+); it also runs as a plain linux/arm64 binary under Termux.

Layout

Security

This is a localhost service with no authentication - bind it to loopback and do not expose :11470 to untrusted networks. By design it shells out to ffmpeg/yt-dlp and acts as an open reverse proxy (/proxy) for the local web UI; treat anything that can reach the port as fully trusted.

License

MIT - Copyright (c) 2026 Gianluca Boiano.