You will need an VM to run syncing software, which needs internet and would already have access to your password database. What is your concern? That the database password will be extracted through the memory? There are guides such as split-syncthing.
edit: depending on setup with Syncthing, firewall rules could be used to limit risk.