ctucx.git: nixfiles

programs/pipewire: update config

diff --git a/configurations/programs/pipewire.nix b/configurations/programs/pipewire.nix
@@ -1,11 +1,18 @@
-{ ... }:
+{ config, ib, ... }:
 
 {
-  security.rtkit.enable = true;
   imports = [
     ./avahi.nix
   ];
 
+  security.rtkit.enable  = true;
+  networking.firewall    = {
+    extraCommands   = (if config.networking.hostName == "stasicontainer" then ''
+      iptables -A nixos-fw -m iprange --src-range 10.0.0.0-10.0.0.255 -p tcp --dport 4713 -j nixos-fw-accept
+      iptables -A nixos-fw -m iprange --src-range 195.39.246.32-195.39.246.47 -p tcp --dport 4713 -j nixos-fw-accept
+    '' else "");
+  };
+
   services = {
     pipewire = {
       enable = true;

@@ -13,10 +20,53 @@
 
       media-session.enable = true;
       alsa.enable          = true;
+      pulse.enable         = true;
 
-      #todo: discovery of pulseaudio-network-shares
-      pulse = {
-        enable = true;
+      config = {
+        pipewire-pulse = {
+          "context.exec"       = [];
+          "stream.properties"  = {};
+          "context.properties" = {};
+          "context.spa-libs"   = {
+            "audio.convert.*" = "audioconvert/libspa-audioconvert";
+            "support.*"       = "support/libspa-support";
+          };
+          "context.modules" = [
+            {
+              name  = "libpipewire-module-rtkit";
+              args  = {};
+              flags = [ "ifexists" "nofail" ];
+            }
+            { name = "libpipewire-module-protocol-native"; }
+            { name = "libpipewire-module-client-node"; }
+            { name = "libpipewire-module-adapter"; }
+            { name = "libpipewire-module-metadata"; }
+            {
+              name = "libpipewire-module-protocol-pulse";
+              args = {
+                "server.address" = (
+                  if config.networking.hostName != "stasicontainer" then [
+                    "unix:native"
+                  ] else [
+                    "unix:native"
+                    "tcp:4713"
+                  ]
+                );
+                "vm.overrides" = {
+                  "pulse.min.quantum" = "1024/48000";
+                };
+              };
+            }
+            { name = "libpipewire-module-zeroconf-discover"; }
+          ] ++ (if config.networking.hostName == "stasicontainer" then [
+            {
+              name = "libpipewire-module-pulse-tunnel";
+              args = {
+                "pulse.server.address" = "tcp:10.0.0.1";
+              };
+            }
+          ] else []);
+        };
       };
     };
   };