From a20426c8501c34480cc53d810bc092c7dfb92af6 Mon Sep 17 00:00:00 2001
From: coolneng <akasroua@gmail.com>
Date: Sun, 1 May 2022 23:09:20 +0200
Subject: [PATCH] Restrict pipewire TCP backend to localhost

---
 modules/audio.nix | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/modules/audio.nix b/modules/audio.nix
index 8ed9d1b..a2b9322 100644
--- a/modules/audio.nix
+++ b/modules/audio.nix
@@ -22,7 +22,9 @@ in {
       defaultConf = lib.importJSON
         "${inputs.nixpkgs}/nixos/modules/services/desktops/pipewire/daemon/pipewire-pulse.conf.json";
     in lib.recursiveUpdate defaultConf {
-      "pulse.properties" = { "server.address" = [ "unix:native" "tcp:4713" ]; };
+      "pulse.properties" = {
+        "server.address" = [ "unix:native" "tcp:127.0.0.1:4713" ];
+      };
     };
   };
   security.rtkit.enable = true;