diff --git a/hosts/alyssum/default.nix b/hosts/alyssum/default.nix
index 3eb7289..9a53926 100644
--- a/hosts/alyssum/default.nix
+++ b/hosts/alyssum/default.nix
@@ -1,4 +1,4 @@
-{ inputs, lib, modules, modulesPath, ... }: {
+{ inputs, modules, modulesPath, ... }: {
   networking.hostName = "alyssum";
   system.stateVersion = "25.11";
   time.timeZone = "Australia/Melbourne";
@@ -24,7 +24,6 @@
     tailscale
 
     modules.services.nginx
-    modules.services.syncthing
 
     inputs.c-garnet.nixosModule
 
@@ -36,5 +35,4 @@
   ];
 
   me.environment = "headless";
-  services.syncthing.user = lib.mkForce "hana";
 }
diff --git a/modules/services/syncthing.nix b/modules/services/syncthing.nix
index d27f911..2316f9f 100644
--- a/modules/services/syncthing.nix
+++ b/modules/services/syncthing.nix
@@ -1,7 +1,7 @@
 { config, ... }:
 let
   dir = "/persist/shared/.syncthing";
-  uid = toString config.services.syncthing.user;
+  uid = toString config.users.users.rin.uid;
   gid = toString config.users.groups.users.gid;
 in
 {
diff --git a/modules/system/tailscale.nix b/modules/system/tailscale.nix
index 02bce52..732a9bb 100644
--- a/modules/system/tailscale.nix
+++ b/modules/system/tailscale.nix
@@ -1,7 +1,6 @@
 { config, ... }: {
   age.secrets.tailscale_auth.file = ../../secrets/tailscale_auth.age;
   me.binds."/var/lib/tailscale" = "tailscale";
-  networking.firewall.trustedInterfaces = [ "tailscale0" ];
   services.tailscale = {
     enable = true;
     authKeyFile = config.age.secrets.tailscale_auth.path;