diff --git a/host/roam/syncthing.nix b/host/roam/syncthing.nix
index 8242e0c..a38b9d9 100644
--- a/host/roam/syncthing.nix
+++ b/host/roam/syncthing.nix
@@ -7,6 +7,8 @@ in
     enable = true;
     inherit guiAddress;
 
+    settings.gui.insecureSkipHostcheck = true;
+
     settings.folders.sync = {
       path = "/data/sync/documents-hd";
       type = "receiveencrypted";
diff --git a/mod/desktop/syncthing.nix b/mod/desktop/syncthing.nix
index b390325..36e8afb 100644
--- a/mod/desktop/syncthing.nix
+++ b/mod/desktop/syncthing.nix
@@ -1,6 +1,5 @@
 {
   lib,
-  var,
   config,
   ...
 }:
@@ -8,16 +7,23 @@ lib.mkIf config.hd.desktop.syncthing.enable {
   services.syncthing = {
     enable = lib.mkDefault true;
     user = "hd";
+    # The `sync` folder is further configured in mod/syncthing.nix (devices, encryption, versioning).
     settings.folders = {
       sync = {
         path = "/home/hd/Sync";
         type = "sendreceive";
       };
+      keepass = {
+        id = "keepass";
+        path = "/home/hd/Sync/KeePassXC";
+        type = "sendreceive";
+        devices = [ "p9" ];
+      };
       supernote-note = {
         id = "supernote-note";
         path = "/home/hd/Sync/Dokumente/Supernote/Notizen";
         type = "sendreceive";
-        devices = var.syncthing.device-names.desktops ++ [ "supernote" ];
+        devices = [ "supernote" ];
         versioning = {
           type = "simple";
           params.keep = "10";