Add snapclient user unit

users/jalr/modules/default.nix

@@ -18,7 +18,7 @@
     ./graphics
     ./gui.nix
     ./jameica.nix
-    ./kicad.nix
+    #./kicad.nix FIXME: kicad build fails
     ./mpv.nix
     ./mute-indicator.nix
     ./mycli
@@ -32,6 +32,7 @@
     ./pcmanfm.nix
     ./python.nix
     ./remarkable
+    ./snapclient.nix
     ./sound
     ./sway
     ./thunderbird.nix

users/jalr/modules/snapclient.nix

@@ -0,0 +1,20 @@
+{ nixosConfig, lib, pkgs, ... }:
+
+lib.mkIf nixosConfig.jalr.gui.enable {
+  systemd.user.services.snapclient = {
+    Unit.Description = "Snapcast client";
+    Service = {
+      BindPaths = [ "/run/user/1000/pulse" ];
+      ExecStart = "${pkgs.snapcast}/bin/snapclient --player pulse";
+      NoNewPrivileges = true;
+      ProtectControlGroups = true;
+      ProtectHome = "tmpfs";
+      ProtectKernelModules = true;
+      ProtectKernelTunables = true;
+      RestrictAddressFamilies = "AF_INET AF_INET6 AF_UNIX";
+      RestrictNamespaces = true;
+      Type = "simple";
+    };
+    Install.WantedBy = [ "default.target" ];
+  };
+}