niveum/systems/zaatar/pulseaudio.nix

{
  sound.enable = true;

  hardware.pulseaudio = {
    enable = true;
    systemWide = true;
    tcp = {
      enable = true;
      anonymousClients.allowedIpRanges = ["127.0.0.1" "10.243.2.0/24" "192.168.0.0/16"];
    };
    zeroconf.publish.enable = true;
  };
  networking.firewall.allowedTCPPorts = [4713];
}