diff --git a/flake.lock b/flake.lock
index 0e30908..3bcd271 100644
--- a/flake.lock
+++ b/flake.lock
@@ -787,6 +787,22 @@
         "type": "github"
       }
     },
+    "gpg-base-conf": {
+      "flake": false,
+      "locked": {
+        "lastModified": 1710730803,
+        "narHash": "sha256-mZwEZxZJ3vLdgvKyFqGSkwg0JRgH1sshe5EvWXoU6JA=",
+        "owner": "drduh",
+        "repo": "config",
+        "rev": "6fc554136c5e179cacc9ba88a18ad61a9ea37979",
+        "type": "github"
+      },
+      "original": {
+        "owner": "drduh",
+        "repo": "config",
+        "type": "github"
+      }
+    },
     "highlight-undo": {
       "flake": false,
       "locked": {
@@ -1345,11 +1361,11 @@
     },
     "nixpkgs_4": {
       "locked": {
-        "lastModified": 1710838473,
-        "narHash": "sha256-RLvwdQSENKOaLdKhNie8XqHmTXzNm00/M/THj6zplQo=",
+        "lastModified": 1710695816,
+        "narHash": "sha256-3Eh7fhEID17pv9ZxrPwCLfqXnYP006RKzSs0JptsN84=",
         "owner": "nixos",
         "repo": "nixpkgs",
-        "rev": "fa9f817df522ac294016af3d40ccff82f5fd3a63",
+        "rev": "614b4613980a522ba49f0d194531beddbb7220d3",
         "type": "github"
       },
       "original": {
@@ -1994,6 +2010,7 @@
       "inputs": {
         "darwin": "darwin",
         "disko": "disko",
+        "gpg-base-conf": "gpg-base-conf",
         "home-manager": "home-manager",
         "lanzaboote": "lanzaboote",
         "neovim-flake": "neovim-flake",
diff --git a/systems/x86_64-linux/sgx-nixos/default.nix b/systems/x86_64-linux/sgx-nixos/default.nix
index dad7d93..c7e2046 100644
--- a/systems/x86_64-linux/sgx-nixos/default.nix
+++ b/systems/x86_64-linux/sgx-nixos/default.nix
@@ -4,12 +4,6 @@ with lib.metacfg;
 {
   imports = [ ./hardware-configuration.nix ];
 
-  boot.kernel.sysctl."net.ipv4.conf.all.route_localnet" = 1;
-  networking.firewall.extraCommands = ''
-    iptables -t nat -A OUTPUT -p tcp --dport 8081 -j DNAT --to-destination 192.168.122.1:8081
-    iptables -t nat -A POSTROUTING -j MASQUERADE
-  '';
-
   metacfg = {
     base.enable = true;
     nix-ld.enable = true;