diff --git a/Timeline.org b/Timeline.org
index 15490c1..69ef5e8 100644
--- a/Timeline.org
+++ b/Timeline.org
@@ -39,7 +39,7 @@
 ** Web stack [1/7] [14%]
 *** IN-PROGRESS Nginx [1/5] [20%]
     - [X] Radicale reverse proxy
-    - [ ] Syncthing discovery reverse proxy
+    - [ ] Syncthing reverse proxy
     - [ ] Wallabag vhost
     - [ ] Gitea vhost
     - [ ] Miniflux vhost
diff --git a/modules/datasync.nix b/modules/datasync.nix
index 309e8cf..2ca1750 100644
--- a/modules/datasync.nix
+++ b/modules/datasync.nix
@@ -53,7 +53,7 @@
     enable = true;
     config = ''
       [server]
-      hosts = 0.0.0.0:5232
+      hosts = 127.0.0.1:5232
       max_connections = 20
       max_content_length = 100000000
       timeout = 30
diff --git a/modules/networking.nix b/modules/networking.nix
index 4854d64..358cbb7 100644
--- a/modules/networking.nix
+++ b/modules/networking.nix
@@ -27,5 +27,8 @@
     autoLoadConntrackHelpers = true;
     connectionTrackingModules = [ "sane" ];
   };
+
+  # Disable IPv6
+  networking.enableIPv6 = false;
 }
 
diff --git a/modules/webstack.nix b/modules/webstack.nix
index ec5d827..5c19d58 100644
--- a/modules/webstack.nix
+++ b/modules/webstack.nix
@@ -48,8 +48,8 @@
       "coolneng.duckdns.org" = {
         enableACME = true;
         forceSSL = true;
-        sslCertificate = "/var/lib/acme/radicale.coolneng.duckdns.org/fullchain.pem";
-        sslCertificateKey = "/var/lib/acme/radicale.coolneng.duckdns.org/key.pem";
+        sslCertificate = "/var/lib/acme/coolneng.duckdns.org/fullchain.pem";
+        sslCertificateKey = "/var/lib/acme/coolneng.duckdns.org/key.pem";
         locations."/radicale/" = {
           proxyPass = "http://localhost:5232/";
           extraConfig = ''