> I had to set my syncthing web GUI to be listening on all addresses instead of just 127.0.0.1. I don't love this approach, but again, this thing has nothing private on it.

OP mentions SOCKS proxy but you can also just port-forward the one web ui port instead:

    ssh -nNT writerdeck -L 8484:localhost:8384