wg & syncthing properly talk through subnet

hosts/server/configuration.nix

@@ -21,7 +21,8 @@
         |> map (srv: srv.port);
       ports = enabledPorts ++ [
         2049 # idk
-        8384 # syncthing
+        8384 # syncthing gui
+        22000 # syncthing relay
         3452 # sonarqube
         config.services.gitea.settings.server.SSH_PORT
       ];
@@ -40,7 +41,10 @@
           {
             publicKey = "dFbiSekBwnZomarcS31o5+w6imHjMPNCipkfc2fZ3GY=";
             endpoint = "${config.my.ips.vps}:51820";
-            allowedIPs = [ "${config.my.ips.wg-vps}/32" ];
+            allowedIPs = [
+              "${config.my.ips.wg-vps}/32"
+              "${config.my.ips.wg-friends}/24" # all friends
+            ];
             persistentKeepalive = 25;
           }
         ];