Add docker user configurable forward rules

templates/nftables.j2

@@ -75,4 +75,10 @@ table ip filter {
 
     tcp dport {{ jellyfin_http_port }} ip saddr . ip daddr @vpn_media_set accept comment "Jellyfin HTTP"
   }
+
+  # docker's user configurable forward hook chain
+  chain DOCKER-USER {
+    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ transmission_nginx_ip }} accept
+    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ syncthing_nginx_ip }} accept
+  }
 }

templates/syncthing/config.j2

@@ -71,8 +71,7 @@
     <address>{{ syncthing_listen_address }}:{{ syncthing_gui_port }}</address>
     <apikey>{{ syncthing_api_key }}</apikey>
     <theme>default</theme>
-    <user>{{ syncthing_gui_user }}</user>
-    <password>{{ syncthing_gui_pass }}</password>
+    <insecureAdminAccess>true</insecureAdminAccess>
   </gui>
 
   <options>

vars/syncthing.yml

@@ -9,17 +9,6 @@ syncthing_api_key: !vault |
           30316565373866326337383137633639636566623263333061633830366634666537633765343533
           3736383135393238663963353131663733363962343163363539
 
-syncthing_gui_user: sonny
-syncthing_gui_pass: !vault |
-          $ANSIBLE_VAULT;1.1;AES256
-          32393632636263333466313465396334306462303030373439643933626464643231636466393230
-          3463306237616265333666313135373636646561386235300a303938326234663237336639613561
-          62616132306266363166396333643730386233343261653338373937363137356333383932323332
-          6539663665653732370a363565383239646264363931356361366466326161393730396433346635
-          62636666356632663230646238343033623430363063393962396632393730343164656438343231
-          62623966623964656164363233653230373366346235303239326665623637396563633939313565
-          313230626464383238313931663265373233
-
 syncthing_devices:
   - name: Desktop
     id: &syncthing_desktop_id CSDXP5E-4UBNC36-32EHTPK-L6Y6JVZ-HQHM42R-FJXN2LI-2MTYRFX-3ZZPUQN