Add internal VPN interface to trusted interfaces

lib/tinc/default.nix

@@ -36,11 +36,15 @@ networkConfiguration:
 					prefixLength = 24;
 				}];
 
-				networking.firewall.allowedTCPPorts = [
+				networking.firewall = {
+					allowedTCPPorts = [
 						655
 					];
-
+					allowedUDPPorts = [
-				networking.firewall.allowedUDPPorts = [
 						655
 					];
+					trustedInterfaces = [
+						"tinc.cryto"
+					];
+				};
 			}