diff --git a/nix/london/configuration.nix b/nix/london/configuration.nix
index 912add2..e442104 100644
--- a/nix/london/configuration.nix
+++ b/nix/london/configuration.nix
@@ -58,8 +58,8 @@
       enable = true;
       allowedUDPPortRanges = [ { from = 27031; to = 27036; } ];
       allowedTCPPortRanges = [ { from = 27036; to = 27037; } ];
-      allowedTCPPorts = [ 7000 7100 ];
-      allowedUDPPorts = [ 6000 6001 7011 41641 3478 ];
+      allowedTCPPorts = [ 7000 7100 22000 ];
+      allowedUDPPorts = [ 6000 6001 7011 41641 3478 22000 21027 ];
       trustedInterfaces = [ "tailscale0" ];
       checkReversePath = "loose";
     };
diff --git a/nix/nas/configuration.nix b/nix/nas/configuration.nix
index 28b7af6..ae41d0c 100644
--- a/nix/nas/configuration.nix
+++ b/nix/nas/configuration.nix
@@ -49,6 +49,15 @@
         };
       };
     };
+    syncthing = {
+      enable = true;
+      overrideDevices = false;
+      overrideFolders = false;
+      user = "gsimmer";
+      dataDir = "/Primary/gabriel";
+      #configDir = "/Primary/gsimmer/.config/syncthing";
+      guiAddress = "100.116.48.47:8384";
+    };
     prometheus.exporters = {
       blackbox = {
         enable = true;
@@ -310,8 +319,8 @@
       trustedInterfaces = ["tailscale0" "virbr0"];
       checkReversePath = "loose";
       enable = true;
-      allowedTCPPorts = [ 22 53 80 443 2049 4328 5432 9100 ];
-      allowedUDPPorts = [ 53 41641 ];
+      allowedTCPPorts = [ 22 53 80 443 2049 4328 5432 9100 22000 ];
+      allowedUDPPorts = [ 53 41641 22000 21027 ];
     };
     useDHCP = false;
     bridges = {
diff --git a/nix/nas/home.nix b/nix/nas/home.nix
index fbd02fc..e394d75 100644
--- a/nix/nas/home.nix
+++ b/nix/nas/home.nix
@@ -52,11 +52,6 @@ end
       }
     ];
   };
-
-  services.syncthing = {
-    enable = true;
-    extraOptions = [ "--gui-address=100.116.48.47:8384" ];
-  };
   
   programs.direnv = {
     enable = true;