Syncthing firewall rules (allow syncthing only)

[tr0ttel]

So - all my Syncthing issues solved.
I have following setup:

• Qubes OS Notebook with Syncthing in a “Syncthing AppVM”
• Graphene OS Smartphone with Rethink DNS (Firewall and DNS FIlter)
• need only direct local connection, no need to synchronize when in other LAN or mobile

Setup:
Smartphone:

• in Graphene OS adjustment: VPN only connection allowed, VPN always active
• RethinkDNS: configuration → Apps → Syncthing: bypass DNS & Firewall activated (option Bypass app from all proxies enabled too).
• Syncthing Fork: assigned a static IP (from my network of the QubesOS Notebook)

Notebook (QubesOS):

• AppVM with syncthing → firewall-rules: allow only connection to the static ip of Smartphone
• assigned static ip of the Smarthone device

Solution is based on the information from this thread:

Syncthing- how to configure for better speeds

Thank you sonele, that was an issue. Now I have solid ~72.8 MiB/s without a hassle If its fine for everybody, I would like to write small instruction in my original post, for those with same issue as me. How I did it ? First Get your IP of Android in my case Pixel 6a with GrapheneOS. In phone Settings>Network&internet>Internet(WiFi) find your wireless network. look for Settings Icon, next to name of your network. Inside Look for “IP Address” and wr…

Everything works fine. Full speed (27MB/s) synchronisation speed). Connects immediately. No need for mobile synchronisation.

Hope this will help some people.
I have a standard QubesOS setup: AppVM → sys-firewall → sys-net → network → GrapheneOS smartphone.
Adjustments only done in AppVM - and on smartphone.