diff --git a/roles/syncthing/tasks/main.yml b/roles/syncthing/tasks/main.yml
index 15069c7..8b197fe 100644
--- a/roles/syncthing/tasks/main.yml
+++ b/roles/syncthing/tasks/main.yml
@@ -15,8 +15,8 @@
     src: "{{ role_path }}/files/cert.pem"
     dest: /apps/syncthing/config/cert.pem
 - name: Copy Syncthing configuration
-  copy:
-    src: "{{ role_path }}/files/config.xml"
+  template:
+    src: "{{ role_path }}/templates/config.xml.j2"
     dest: /apps/syncthing/config/config.xml
 - name: Create Syncthing data directory
   file:
diff --git a/roles/syncthing/files/config.xml b/roles/syncthing/templates/config.xml.j2
similarity index 93%
rename from roles/syncthing/files/config.xml
rename to roles/syncthing/templates/config.xml.j2
index 2bafb46..416c42f 100644
--- a/roles/syncthing/files/config.xml
+++ b/roles/syncthing/templates/config.xml.j2
@@ -45,6 +45,9 @@
     </folder>
     <folder id="gfx9s-zaxrt" label="Music" path="/data/music" type="sendreceive" rescanIntervalS="3600" fsWatcherEnabled="true" fsWatcherDelayS="10" ignorePerms="false" autoNormalize="true">
         <filesystemType>basic</filesystemType>
+        <device id="B4Y7T5D-PHHDOFH-ZZ4VGOK-YNJINJG-VCYC272-PIE24XA-XJ5HSOD-DF3T6AJ" introducedBy="">
+            <encryptionPassword></encryptionPassword>
+        </device>
         <device id="IGS4TYV-TQ6X2CG-OE3M2RE-DKZWKQZ-HEKIGHT-C6EIGHL-CBP2ULE-M3WZ7QC" introducedBy="">
             <encryptionPassword></encryptionPassword>
         </device>
@@ -87,6 +90,16 @@
             <maxTotalSize>4096</maxTotalSize>
         </xattrFilter>
     </folder>
+    <device id="B4Y7T5D-PHHDOFH-ZZ4VGOK-YNJINJG-VCYC272-PIE24XA-XJ5HSOD-DF3T6AJ" name="Smartphone" compression="metadata" introducer="false" skipIntroductionRemovals="false" introducedBy="">
+        <address>dynamic</address>
+        <paused>false</paused>
+        <autoAcceptFolders>false</autoAcceptFolders>
+        <maxSendKbps>0</maxSendKbps>
+        <maxRecvKbps>0</maxRecvKbps>
+        <maxRequestKiB>0</maxRequestKiB>
+        <untrusted>false</untrusted>
+        <remoteGUIPort>0</remoteGUIPort>
+    </device>
     <device id="IGS4TYV-TQ6X2CG-OE3M2RE-DKZWKQZ-HEKIGHT-C6EIGHL-CBP2ULE-M3WZ7QC" name="max" compression="metadata" introducer="false" skipIntroductionRemovals="false" introducedBy="">
         <address>dynamic</address>
         <paused>false</paused>
@@ -109,7 +122,7 @@
     </device>
     <gui enabled="true" tls="false" debugging="false">
         <address>0.0.0.0:8384</address>
-        <apikey></apikey>
+        <apikey>{{ syncthing.apikey }}</apikey>
         <theme>light</theme>
     </gui>
     <ldap></ldap>
diff --git a/roles/syncthing/vars/main.yml b/roles/syncthing/vars/main.yml
new file mode 100644
index 0000000..7e33fce
--- /dev/null
+++ b/roles/syncthing/vars/main.yml
@@ -0,0 +1,9 @@
+syncthing:
+  apikey: !vault |
+          $ANSIBLE_VAULT;1.1;AES256
+          30323136343566306566323232343538306565653135303536363234636365383234366332316339
+          6363383637653032643637373662383331633933633765340a366538616134613365653261353861
+          34326533633239353339326636303762306639653839386535316639643762636239633732386165
+          3932636432643631340a633831663833323633623461646131356566383539613835613738656633
+          32336138363032613833613736333739613762343833383563633337626361363566353066636536
+          6434333037653732626537363938613463333863336134313664