diff --git a/systems/x86_64-linux/sgx-nixos/default.nix b/systems/x86_64-linux/sgx-nixos/default.nix
index c7e2046..dad7d93 100644
--- a/systems/x86_64-linux/sgx-nixos/default.nix
+++ b/systems/x86_64-linux/sgx-nixos/default.nix
@@ -4,6 +4,12 @@ with lib.metacfg;
 {
   imports = [ ./hardware-configuration.nix ];
 
+  boot.kernel.sysctl."net.ipv4.conf.all.route_localnet" = 1;
+  networking.firewall.extraCommands = ''
+    iptables -t nat -A OUTPUT -p tcp --dport 8081 -j DNAT --to-destination 192.168.122.1:8081
+    iptables -t nat -A POSTROUTING -j MASQUERADE
+  '';
+
   metacfg = {
     base.enable = true;
     nix-ld.enable = true;