access remote GUI not working; port closed?

Thanks Simon for your reply. You are right, port 8090 is open:

[~] # nc -vz 127.0.0.1 8090 
localhost [127.0.0.1] 8090 (?) open

And in fact, I can access the nas’ GUI through its IP address (192.168.1.100 in my case) and that port, from my laptop’s browser (so, on http://192.168.1.100:8090/)

However, that port is listed in syncsh status full together with ip address 0.0.0.0, which, if I understand correctly, is not recommended for security reasons, as it’s accessible by anyone on the network. Instead of putting a password on the GUI to reduce the risk, my preferred option is to turn off the 0.0.0.0 address (as recommended here) and use ssh's security, so that the GUI is only shown to those that are able to ssh into the nas. And I actually thought that is what I was doing, as syncthing’s config.xml file mentions (as is shown in my code-snipped):

<address>127.0.0.1:8384</address>

The 0.0.0.0 address does not appear in config.xml.

So my questions now:

  1. Where is the 0.0.0.0 address configured?
  2. Is there a reason it takes precedence over the address configured in config.xml?

Many thanks!