Add internal VPN interface to trusted interfaces

lib/tinc/default.nix

@@ -36,11 +36,15 @@ networkConfiguration:
 					prefixLength = 24;
 				}];
 
-				networking.firewall.allowedTCPPorts = [
+				networking.firewall = {
-					655
+					allowedTCPPorts = [
-				];
+						655
-
+					];
-				networking.firewall.allowedUDPPorts = [
+					allowedUDPPorts = [
-					655
+						655
-				];
+					];
+					trustedInterfaces = [
+						"tinc.cryto"
+					];
+				};
 			}