From ad528f4d1a0fef113ee405f097d0aa37a4503c54 Mon Sep 17 00:00:00 2001
From: Madeline Hashcube <hashcube.dev@proton.me>
Date: Sun, 22 Mar 2026 17:25:27 -0500
Subject: [PATCH] So long Twingate. It's been real.

---
 flake.nix                                 |   3 ---
 modules/network/ports.nix                 |   4 ---
 modules/network/twingate.nix              |   4 ---
 modules/tg-connectors/magames-desktop.nix |  29 ----------------------
 secrets/secrets.nix                       |   1 -
 secrets/twingate-keys.age                 | Bin 1002 -> 0 bytes
 6 files changed, 41 deletions(-)
 delete mode 100644 modules/network/twingate.nix
 delete mode 100644 modules/tg-connectors/magames-desktop.nix
 delete mode 100644 secrets/twingate-keys.age

diff --git a/flake.nix b/flake.nix
index 01fad59..55b51a5 100644
--- a/flake.nix
+++ b/flake.nix
@@ -56,16 +56,13 @@
           niri.nixosModules.niri
           copyparty.nixosModules.default
           ./modules/network/copyparty/magames-desktop.nix
-          ./modules/tg-connectors/magames-desktop.nix
 
           ./modules/network/gitea.nix
           ./modules/network/postgresql/ass-db.nix
-          ./modules/network/twingate.nix
           ./modules/network/open-webui.nix
 
           ./modules/network/default.nix
 
-
           ./modules/display/niri.nix
           ./modules/display/sddm.nix
 
diff --git a/modules/network/ports.nix b/modules/network/ports.nix
index 0e98510..47aa1ea 100644
--- a/modules/network/ports.nix
+++ b/modules/network/ports.nix
@@ -16,10 +16,6 @@
       ];
       allowedTCPPortRanges = [
         { from = 1714; to = 1764; }
-        { from = 30000; to = 31000; }   # Allow TCP on ports in the range 30000-31000
-      ];
-      allowedUDPPortRanges = [
-        { from = 1; to = 65535; }
       ];
     };
     networkmanager.enable = true;
diff --git a/modules/network/twingate.nix b/modules/network/twingate.nix
deleted file mode 100644
index f76a6fe..0000000
--- a/modules/network/twingate.nix
+++ /dev/null
@@ -1,4 +0,0 @@
-{ ... }:
-{
-  services.twingate.enable = true;
-}
diff --git a/modules/tg-connectors/magames-desktop.nix b/modules/tg-connectors/magames-desktop.nix
deleted file mode 100644
index 6caceb6..0000000
--- a/modules/tg-connectors/magames-desktop.nix
+++ /dev/null
@@ -1,29 +0,0 @@
-{ inputs, config, lib, pkgs, ... }:
-
-{
-  users.extraGroups.docker.members = [ "magames" ];
-  age.secrets.twingate-keys.file = ../../secrets/twingate-keys.age;
-
-  virtualisation = {
-    docker = {
-      enable = true;
-      rootless = {
-        enable = true;
-        setSocketVariable = true;
-      };
-    };
-
-    oci-containers = {
-      backend = "docker";  # Use Docker as the backend
-      containers = {
-        twingate-connector = {
-          hostname = "twingate-magames-desktop";
-          image = "twingate/connector:1.79.0";
-          autoStart = true;
-          extraOptions = [ "--network=host" ];
-          environmentFiles = [ config.age.secrets.twingate-keys.path ];
-        };
-      };
-    };
-  };
-}
diff --git a/secrets/secrets.nix b/secrets/secrets.nix
index 43d60b9..44bb0f1 100644
--- a/secrets/secrets.nix
+++ b/secrets/secrets.nix
@@ -6,5 +6,4 @@ let
   machines = [ desktop ];
 in
 {
-  "twingate-keys.age".publicKeys = [ desktop ];
 }
diff --git a/secrets/twingate-keys.age b/secrets/twingate-keys.age
deleted file mode 100644
index 3079a688944405051d723e5b5ded8fbd3b8f229d..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1002
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCSPG%nB%4^)T>vor}W
zE;WzL@$t{9^z*dv%q}jivP`WE@l7>%%QNwHEb>ne$PEd~@Z~Z#$o0<8GS10#P4aRt
zHYsy7wKO#h2+PW|Fbhu7c8Tx^bcxIjEDsM&_T|#m)l~>F&`t|9_DBo~5B3PsPKzpc
z50A*u&MGsEGWItL$tmzMcPtMu(~qhu@#L!8s<VRc$C@6Ghum^Iew*^1E8E>saB_KZ
z)9UIAI%$IU{x`gFo1HZE`T6Jfs*G;&b9~)X+x6K;-usSv>6cUMFTFhxYuPrl%289p
zGLrwBi*oFAzN}x5{O&gR%?@m|Jg@kJeQTaw;Et7h)wgz@c)OvRS&i9s&BIg$qa*Hx
z0<*PW-4QU^>->b}OTv_ZXPf6=uG^ivzKTn_y!Fbdvt9ordrudaM7yV7y?Tw|z$F_W
z_H~oO=P0#rH-5EW`r5a7>0PH*bbaEeym{l#!$(4mA;OLu{X^@e6&3a;wb~t-dz@>3
znVDSrtN;8v1*SgmI5?vtMs&(Du754>>+8F_PDs7+RC)5(NKIq%s#9ybZU;GZ&-ixm
znOx$x2N$2}6&h9-so8Wr)HYw5Uou60-KJZ;f3|B*6?v8$vumouqZwk7nHjN-M|+md
z?V8%KenS6h-M3TpuBJ4Zw&<ly+7>K&eqL4ifv@pg*7q){v8X1pemDFg9>CG3vgl)r
z@XyV?pa1Qh{O{zq?MZx}ET2_9I-`2uKlJ)fGg;euJqbC>1Llo~H?|u!6f$R<)z)OF
zM)WW!ZQhvVkR$cpYfZY!&i=kTix+O+JoQXxw8k?ggK5rEy}Or4>$knxB;io7*m6?a
zw5N>R1&(X`6O47mzvj;fj^5?kFS@evxvTI0JI8-Ac+YZW{_bJ5NojWNJ;jHoJEcGA
zhkSX%FKLwWbk>i>(lt(h=G3@Jw6^>8vD8-YI`)O3|Ak7^WtE+`mA<(=wq{#dUA^(!
z@lNk|85W9R!apis`ZV!~H|X>)P+utMcfZc!NQ&5>O7m*jIsU%CohPSS*sY6A4y#?_
z`lt1Y>aDHpXE=Y%UQ=AiWmsSsDPZ-TEAv8YvfFQkuL8!Bc5j59PY@Rgzg6!Tr2klR
z@*IW86)SW2^1Q2`{w@`LSi6UN!Ol7I*$FX`R}IY5xAhm?=!rVk@NKy@pI}Y6?Ue;#
zZuUReS5B(3>wef5aP4@7Zk4v#pDO}S`KH7+Uo*J-t5!5h|BmC)t=He4I3{0U;jeT5
zsEnm;v~cKYnZ)X(BUb{iC@x}4SB(7fKtSDBLFq?`ckR|I8^7wcEsR~a{@quV4gMYf
LC$_auYx)WR-3895

-- 
2.51.2