Add internal VPN interface to trusted interfaces

lib/tinc/default.nix

@@ -36,11 +36,15 @@ networkConfiguration:
 					prefixLength = 24;
 				}];
 
-				networking.firewall.allowedTCPPorts = [
-					655
-				];
-
-				networking.firewall.allowedUDPPorts = [
-					655
-				];
+				networking.firewall = {
+					allowedTCPPorts = [
+						655
+					];
+					allowedUDPPorts = [
+						655
+					];
+					trustedInterfaces = [
+						"tinc.cryto"
+					];
+				};
 			}