diff --git a/nix/os/containers/syncthing.nix b/nix/os/containers/syncthing.nix
index 93481ff..4798ba6 100644
--- a/nix/os/containers/syncthing.nix
+++ b/nix/os/containers/syncthing.nix
@@ -9,10 +9,15 @@ in args // {
     ];
 
     networking.firewall.enable = true;
+    networking.firewall.allowedTCPPorts = [
+      # syncthing gui
+      8384
+    ];
 
     services.syncthing = {
       enable = true;
       openDefaultPorts = true;
+      guiAddress = "0.0.0.0:8384";
     };
   };