Disabling public access to Syncthing's REST API

[libarzi]

I am serving the Syncthing web GUI to my local network via a reverse proxy web server (Nginx). Since no one on the local network needs to use Syncthing’s REST API, is it appropriate to configure my web server to block access to the /rest/... endpoints?

I am planning to add this Nginx configuration to block local network access to the REST API:

location /rest/ {
    deny all;  # Return 403 Forbidden.
}

Will there be any negative side effects from blocking /rest/...? Would it affect the functioning of the rest of Syncthing?

[acolomb (André Colomb)]

The Web GUI is the primary consumer of the REST API. If you want to use the GUI, REST must be accessible as well.