diff --git a/systems/brain/syncthing.nix b/systems/brain/syncthing.nix
index ba09529..bdd13bf 100644
--- a/systems/brain/syncthing.nix
+++ b/systems/brain/syncthing.nix
@@ -1,24 +1,30 @@
 {
-  services.syncthing.settings.folders = {
-    "dotfiles" = {
-      path = "/home/richie/dotfiles";
-      devices = [
-        "jeeves"
-        "bob"
-        "rhapsody-in-green"
-      ];
-      fsWatcherEnabled = true;
-    };
-    "important" = {
-      id = "4ckma-gtshs"; # cspell:disable-line
-      path = "/home/richie/important";
-      devices = [
-        "bob"
-        "jeeves"
-        "phone"
-        "rhapsody-in-green"
-      ];
-      fsWatcherEnabled = true;
+  networking.firewall.allowedTCPPorts = [ 8384 ];
+
+  services.syncthing = {
+    overrideFolders = false;
+    guiAddress = "192.168.90.35:8384";
+    settings = {
+      "dotfiles" = {
+        path = "/home/richie/dotfiles";
+        devices = [
+          "jeeves"
+          "bob"
+          "rhapsody-in-green"
+        ];
+        fsWatcherEnabled = true;
+      };
+      "important" = {
+        id = "4ckma-gtshs"; # cspell:disable-line
+        path = "/home/richie/important";
+        devices = [
+          "bob"
+          "jeeves"
+          "phone"
+          "rhapsody-in-green"
+        ];
+        fsWatcherEnabled = true;
+      };
     };
   };
 }
diff --git a/users/richie/home/ssh_config.nix b/users/richie/home/ssh_config.nix
index b597154..d4d9b5b 100644
--- a/users/richie/home/ssh_config.nix
+++ b/users/richie/home/ssh_config.nix
@@ -17,6 +17,20 @@
         identityFile = "~/.ssh/id_ed25519";
         port = 2222;
       };
+      brain = {
+        hostname = "192.168.90.35";
+        user = "richie";
+        identityFile = "~/.ssh/id_ed25519";
+        port = 629;
+        dynamicForwards = [ { port = 9050; } ];
+        compression = true;
+      };
+      unlock-brain = {
+        hostname = "192.168.95.35";
+        user = "root";
+        identityFile = "~/.ssh/id_ed25519";
+        port = 2222;
+      };
       bob = {
         hostname = "192.168.90.25";
         user = "richie";