diff --git a/templates/nftables.j2 b/templates/nftables.j2
index 74f3d4b..0fb824d 100644
--- a/templates/nftables.j2
+++ b/templates/nftables.j2
@@ -75,4 +75,10 @@ table ip filter {
 
     tcp dport {{ jellyfin_http_port }} ip saddr . ip daddr @vpn_media_set accept comment "Jellyfin HTTP"
   }
+
+  # docker's user configurable forward hook chain
+  chain DOCKER-USER {
+    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ transmission_nginx_ip }} accept
+    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ syncthing_nginx_ip }} accept
+  }
 }