From d0bf03527c8446bc4be5d078ceb5c3f0f45c27c0 Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Thu, 19 Feb 2026 19:07:50 -0500
Subject: [PATCH] firewall: trust wg-br interface

---
 configuration.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/configuration.nix b/configuration.nix
index a181410..7ba9c5e 100644
--- a/configuration.nix
+++ b/configuration.nix
@@ -201,6 +201,7 @@
     hostName = hostname;
     hostId = "0f712d56";
     firewall.enable = true;
+    firewall.trustedInterfaces = [ "wg-br" ];
     useDHCP = false;
     enableIPv6 = false;