diff --git a/shared/server-configuration.nix b/shared/server-configuration.nix
index 02eeacb..ffc575f 100644
--- a/shared/server-configuration.nix
+++ b/shared/server-configuration.nix
@@ -100,18 +100,19 @@ in
     # nfs port TODO make dependant on option enabled
     # 2049 - nfs
     # 8384 - syncthing
-    networking.firewall.allowedTCPPorts = [ 2049 8384 ];
+    networking.firewall.allowedTCPPorts = [ 80 2049 8384 ];
 
 
     services.syncthing = lib.mkIf srvConfig.syncthingEnable {
       enable = true;
-      user = "myusername";
+      user = "luci";
       dataDir = "${srvConfig.nfsRoot}/kage/syncthing";
       configDir = "${srvConfig.nfsRoot}/kage/.config/syncthing";
       # overrideDevices = true;     # overrides any devices added or deleted through the WebUI
       # overrideFolders = true;     # overrides any folders added or deleted through the WebUI
       openDefaultPorts = true;
       group = "users";
+      relay.enable = false;
       # settings = {
       #   devices = {
       #     # "supernote" = { id = "DEVICE-ID-GOES-HERE"; };
@@ -134,6 +135,19 @@ in
     # networking.firewall.allowedTCPPorts = [ ... ];
     # networking.firewall.allowedUDPPorts = [ ... ];
 
+    services.nginx = {
+        enable = true;
+        recommendedProxySettings = true;
+        # recommendedTlsSettings = true;
+        # other Nginx options
+        virtualHosts."http://127.0.0.1" =  {
+          # enableACME = true;
+          # forceSSL = true;
+          locations."/" = {
+            proxyPass = "http://127.0.0.1:8384";
+          };
+        };
+    };
     system.stateVersion = "23.11"; # Did you read the comment?
   };
 }