diff --git a/templates/nftables.j2 b/templates/nftables.j2
index 0fb824d..74f3d4b 100644
--- a/templates/nftables.j2
+++ b/templates/nftables.j2
@@ -75,10 +75,4 @@ table ip filter {
 
     tcp dport {{ jellyfin_http_port }} ip saddr . ip daddr @vpn_media_set accept comment "Jellyfin HTTP"
   }
-
-  # docker's user configurable forward hook chain
-  chain DOCKER-USER {
-    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ transmission_nginx_ip }} accept
-    iifname {{ vpn_interface }} ip saddr {{ vpn_subnet }} ip daddr {{ syncthing_nginx_ip }} accept
-  }
 }
diff --git a/templates/syncthing/config.j2 b/templates/syncthing/config.j2
index c48c0d8..88a9207 100644
--- a/templates/syncthing/config.j2
+++ b/templates/syncthing/config.j2
@@ -71,7 +71,8 @@
     <address>{{ syncthing_listen_address }}:{{ syncthing_gui_port }}</address>
     <apikey>{{ syncthing_api_key }}</apikey>
     <theme>default</theme>
-    <insecureAdminAccess>true</insecureAdminAccess>
+    <user>{{ syncthing_gui_user }}</user>
+    <password>{{ syncthing_gui_pass }}</password>
   </gui>
 
   <options>
diff --git a/vars/syncthing.yml b/vars/syncthing.yml
index 9a77ec7..9f4e036 100644
--- a/vars/syncthing.yml
+++ b/vars/syncthing.yml
@@ -9,6 +9,17 @@ syncthing_api_key: !vault |
           30316565373866326337383137633639636566623263333061633830366634666537633765343533
           3736383135393238663963353131663733363962343163363539
 
+syncthing_gui_user: sonny
+syncthing_gui_pass: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          32393632636263333466313465396334306462303030373439643933626464643231636466393230
+          3463306237616265333666313135373636646561386235300a303938326234663237336639613561
+          62616132306266363166396333643730386233343261653338373937363137356333383932323332
+          6539663665653732370a363565383239646264363931356361366466326161393730396433346635
+          62636666356632663230646238343033623430363063393962396632393730343164656438343231
+          62623966623964656164363233653230373366346235303239326665623637396563633939313565
+          313230626464383238313931663265373233
+
 syncthing_devices:
   - name: Desktop
     id: &syncthing_desktop_id CSDXP5E-4UBNC36-32EHTPK-L6Y6JVZ-HQHM42R-FJXN2LI-2MTYRFX-3ZZPUQN