···2626 }
2727 ];
28282929+ # system-wide pipewire is only socket-activated; a room has no local client
3030+ # after boot, so start it or the ROC source above never listens
3131+ systemd.services.pipewire.wantedBy = [ "multi-user.target" ];
3232+2933 # the hub sends over retiolum (see ./hub.nix), accept only acheron
3034 networking.firewall.extraInputRules = ''
3135 iifname "retiolum" ip saddr ${acheron} udp dport 10001-10003 accept