{
  lib,
  stdenv,
  fetchurl,
  pkg-config,
  libsndfile,
  libtool,
  makeWrapper,
  perlPackages,
  libxtst,
  libxi,
  libx11,
  libsm,
  libice,
  libcap,
  alsa-lib,
  glib,
  dconf,
  avahi,
  libjack2,
  libasyncns,
  lirc,
  dbus,
  sbc,
  bluez5,
  udev,
  udevCheckHook,
  openssl,
  fftwFloat,
  soxr,
  speexdsp,
  systemd,
  webrtc-audio-processing_1,
  gst_all_1,
  check,
  libintl,
  meson,
  ninja,
  m4,
  wrapGAppsHook3,
  fetchpatch2,
  nixosTests,

  x11Support ? false,

  useSystemd ? lib.meta.availableOn stdenv.hostPlatform systemd,

  # Whether to support the JACK sound system as a backend.
  jackaudioSupport ? false,

  # Whether to build the OSS wrapper ("padsp").
  ossWrapper ? true,

  airtunesSupport ? false,

  bluetoothSupport ? stdenv.hostPlatform.isLinux,
  advancedBluetoothCodecs ? false,

  remoteControlSupport ? false,

  zeroconfSupport ? false,

  alsaSupport ? stdenv.hostPlatform.isLinux,
  udevSupport ? stdenv.hostPlatform.isLinux,

  # Whether to build only the library.
  libOnly ? false,

}:

stdenv.mkDerivation rec {
  pname = "${lib.optionalString libOnly "lib"}pulseaudio";
  version = "17.0";

  src = fetchurl {
    url = "https://freedesktop.org/software/pulseaudio/releases/pulseaudio-${version}.tar.xz";
    hash = "sha256-BTeU1mcaPjl9hJ5HioC4KmPLnYyilr01tzMXu1zrh7U=";
  };

  patches = [
    # Install sysconfdir files inside of the nix store,
    # but use a conventional runtime sysconfdir outside the store
    ./add-option-for-installation-sysconfdir.patch

    # Fix crashes with some UCM devices
    # See https://gitlab.archlinux.org/archlinux/packaging/packages/pulseaudio/-/issues/4
    (fetchpatch2 {
      name = "alsa-ucm-Check-UCM-verb-before-working-with-device-status.patch";
      url = "https://gitlab.freedesktop.org/pulseaudio/pulseaudio/-/commit/f5cacd94abcc47003bd88ad7ca1450de649ffb15.patch";
      hash = "sha256-WyEqCitrqic2n5nNHeVS10vvGy5IzwObPPXftZKy/A8=";
    })
    (fetchpatch2 {
      name = "alsa-ucm-Replace-port-device-UCM-context-assertion-with-an-error.patch";
      url = "https://gitlab.freedesktop.org/pulseaudio/pulseaudio/-/commit/ed3d4f0837f670e5e5afb1afa5bcfc8ff05d3407.patch";
      hash = "sha256-fMJ3EYq56sHx+zTrG6osvI/QgnhqLvWiifZxrRLMvns=";
    })
  ];

  postPatch = ''
    # Fails in LXC containers where not all cores are enabled, where this setaffinity call will return EINVAL
    sed -i "/fail_unless(pthread_setaffinity_np/d" src/tests/once-test.c
  '';

  outputs = [
    "out"
    "dev"
  ];

  nativeBuildInputs = [
    pkg-config
    meson
    ninja
    makeWrapper
    perlPackages.perl
    perlPackages.XMLParser
    m4
    udevCheckHook
  ]
  ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [ glib ]
  # gstreamer plugin discovery requires wrapping
  ++ lib.optional (bluetoothSupport && advancedBluetoothCodecs) wrapGAppsHook3;

  propagatedBuildInputs = lib.optionals stdenv.hostPlatform.isLinux [ libcap ];

  buildInputs = [
    libtool
    libsndfile
    soxr
    speexdsp
    fftwFloat
    check
  ]
  ++ lib.optionals (!stdenv.hostPlatform.isDarwin) [
    glib
    dbus
  ]
  ++ lib.optionals (stdenv.hostPlatform.isDarwin || stdenv.hostPlatform.isFreeBSD) [
    libintl
  ]
  ++ lib.optionals (!libOnly) (
    [
      libasyncns
      webrtc-audio-processing_1
    ]
    ++ lib.optional jackaudioSupport libjack2
    ++ lib.optionals x11Support [
      libice
      libsm
      libx11
      libxi
      libxtst
    ]
    ++ lib.optional useSystemd systemd
    ++ lib.optionals stdenv.hostPlatform.isLinux [
      alsa-lib
      udev
    ]
    ++ lib.optional airtunesSupport openssl
    ++ lib.optionals bluetoothSupport [
      bluez5
      sbc
    ]
    # aptX and LDAC codecs are in gst-plugins-bad so far, rtpldacpay is in -good
    ++ lib.optionals (bluetoothSupport && advancedBluetoothCodecs) (
      builtins.attrValues {
        inherit (gst_all_1)
          gst-plugins-bad
          gst-plugins-good
          gst-plugins-base
          gstreamer
          ;
      }
    )
    ++ lib.optional remoteControlSupport lirc
    ++ lib.optional zeroconfSupport avahi
  );

  env =
    lib.optionalAttrs (stdenv.cc.bintools.isLLVM && lib.versionAtLeast stdenv.cc.bintools.version "17")
      {
        # https://gitlab.freedesktop.org/pulseaudio/pulseaudio/-/issues/3848
        NIX_LDFLAGS = "--undefined-version";
      };

  mesonFlags = [
    (lib.mesonEnable "alsa" (!libOnly && alsaSupport))
    (lib.mesonEnable "asyncns" (!libOnly))
    (lib.mesonEnable "avahi" zeroconfSupport)
    (lib.mesonEnable "bluez5" (!libOnly && bluetoothSupport))
    # advanced bluetooth audio codecs are provided by gstreamer
    (lib.mesonEnable "bluez5-gstreamer" (!libOnly && bluetoothSupport && advancedBluetoothCodecs))
    (lib.mesonOption "database" "simple")
    (lib.mesonBool "doxygen" false)
    (lib.mesonEnable "elogind" false)
    # gsettings does not support cross-compilation
    (lib.mesonEnable "gsettings" (
      stdenv.hostPlatform.isLinux && (stdenv.buildPlatform == stdenv.hostPlatform)
    ))
    (lib.mesonEnable "gstreamer" false)
    (lib.mesonEnable "gtk" false)
    (lib.mesonEnable "jack" (jackaudioSupport && !libOnly))
    (lib.mesonEnable "lirc" remoteControlSupport)
    (lib.mesonEnable "openssl" airtunesSupport)
    (lib.mesonEnable "orc" false)
    (lib.mesonEnable "systemd" (useSystemd && !libOnly))
    (lib.mesonEnable "tcpwrap" false)
    (lib.mesonEnable "udev" (!libOnly && udevSupport))
    (lib.mesonEnable "valgrind" false)
    (lib.mesonEnable "webrtc-aec" (!libOnly))
    (lib.mesonEnable "x11" x11Support)

    (lib.mesonOption "localstatedir" "/var")
    (lib.mesonOption "sysconfdir" "/etc")
    (lib.mesonOption "sysconfdir_install" "${placeholder "out"}/etc")
    (lib.mesonOption "udevrulesdir" "${placeholder "out"}/lib/udev/rules.d")

    # pulseaudio complains if its binary is moved after installation;
    # this is needed so that wrapGApp can operate *without*
    # renaming the unwrapped binaries (see below)
    "--bindir=${placeholder "out"}/.bin-unwrapped"
  ]
  ++ lib.optionals (stdenv.hostPlatform.isLinux && useSystemd) [
    (lib.mesonOption "systemduserunitdir" "${placeholder "out"}/lib/systemd/user")
  ]
  ++ lib.optionals stdenv.hostPlatform.isDarwin [
    (lib.mesonEnable "consolekit" false)
    (lib.mesonEnable "dbus" false)
    (lib.mesonEnable "glib" false)
    (lib.mesonEnable "oss-output" false)
  ];

  # tests fail on Darwin because of timeouts
  doCheck = !stdenv.hostPlatform.isDarwin;

  doInstallCheck = true;

  preCheck = ''
    export HOME=$(mktemp -d)
  '';

  postInstall =
    lib.optionalString libOnly ''
      find $out/share -maxdepth 1 -mindepth 1 ! -name "vala" -prune -exec rm -r {} \;
      find $out/share/vala -maxdepth 1 -mindepth 1 ! -name "vapi" -prune -exec rm -r {} \;
      rm -r $out/{.bin-unwrapped,etc,lib/pulse-*}
    ''
    + ''
      moveToOutput lib/cmake "$dev"
      rm -f $out/.bin-unwrapped/qpaeq # this is packaged by the "qpaeq" package now, because of missing deps

      cp config.h $dev/include/pulse
    '';

  preFixup =
    lib.optionalString (stdenv.hostPlatform.isLinux && (stdenv.hostPlatform == stdenv.buildPlatform)) ''
      wrapProgram $out/libexec/pulse/gsettings-helper \
       --prefix XDG_DATA_DIRS : "$out/share/gsettings-schemas/${pname}-${version}" \
       --prefix GIO_EXTRA_MODULES : "${lib.getLib dconf}/lib/gio/modules"
    ''
    # add .so symlinks for modules to be found under macOS
    + lib.optionalString stdenv.hostPlatform.isDarwin ''
      for file in $out/lib/pulseaudio/modules/*.dylib; do
        ln -s "''$file" "''${file%.dylib}.so"
        ln -s "''$file" "$out/lib/pulseaudio/''$(basename ''$file .dylib).so"
      done
    ''
    # put symlinks to binaries in `$prefix/bin`;
    # then wrapGApp will *rename these symlinks* instead of
    # the original binaries in `$prefix/.bin-unwrapped` (see above);
    # when pulseaudio is looking for its own binary (it does!),
    # it will be happy to find it in its original installation location
    + lib.optionalString (!libOnly) ''
      mkdir -p $out/bin
      ln -st $out/bin $out/.bin-unwrapped/*

      # Ensure that service files use the wrapped binaries.
      find "$out" -name "*.service" | while read f; do
          substituteInPlace "$f" --replace "$out/.bin-unwrapped/" "$out/bin/"
      done
    '';

  passthru.tests = {
    inherit (nixosTests) pulseaudio pulseaudio-tcp;
  };

  meta = {
    description = "Sound server for POSIX and Win32 systems";
    homepage = "http://www.pulseaudio.org/";
    license = lib.licenses.lgpl2Plus;
    maintainers = [ ];
    platforms = lib.platforms.unix;

    # https://gitlab.freedesktop.org/pulseaudio/pulseaudio/-/issues/1089
    badPlatforms = [ lib.systems.inspect.platformPatterns.isStatic ];

    longDescription = ''
      PulseAudio is a sound server for POSIX and Win32 systems.  A
      sound server is basically a proxy for your sound applications.
      It allows you to do advanced operations on your sound data as it
      passes between your application and your hardware.  Things like
      transferring the audio to a different machine, changing the
      sample format or channel count and mixing several sounds into
      one are easily achieved using a sound server.
    '';
  };
}