diff --git a/hosts/vessel/syncthing.nix b/hosts/vessel/syncthing.nix
index 3edf0bf..2261321 100644
--- a/hosts/vessel/syncthing.nix
+++ b/hosts/vessel/syncthing.nix
@@ -1,7 +1,12 @@
-{
+let
+  guiPort = 8384;
+in {
   services.syncthing = {
     enable = true;
     systemService = true;
     openDefaultPorts = true;
+    guiAddress = "0.0.0.0:${guiPort}";
   };
+
+  networking.firewall.allowedTCPPorts = [guiPort];
 }