{pkgs, ...}: {
  sound.enable = true;

  environment.systemPackages = [pkgs.ncpamixer];

  hardware.pulseaudio = {
    package = pkgs.pulseaudioFull;
    enable = true;
    systemWide = true;
    tcp = {
      enable = true;
      anonymousClients.allowedIpRanges = ["127.0.0.1" "10.243.2.0/24" "192.168.0.0/16"];
    };
    zeroconf.publish.enable = true;
  };
  networking.firewall.allowedTCPPorts = [4713];
}