*file0.pyrocufflink.blue* hosts syncthing. Forwarding the transport is not strictly required, as syncthing can use relays to encapsulate traffic in HTTPS, but allowing direct access improves performance.