diff --git a/syncthing/cancel.sls b/syncthing/cancel.sls
new file mode 100644
index 0000000..8396e63
--- /dev/null
+++ b/syncthing/cancel.sls
@@ -0,0 +1,12 @@
+/rw/config/rc.local:
+  file.replace:
+    - pattern: 'systemctl.*unmask.*syncthing@user.service'
+    - repl - ''
+    - backup: False
+
+/rw/config/rc.local_2:
+  file.replace:
+    - pattern: 'systemctl.*start.*syncthing@user.service''
+    - repl - ''
+    - backup: False
+
diff --git a/syncthing/cancel.top b/syncthing/cancel.top
new file mode 100644
index 0000000..ec4e210
--- /dev/null
+++ b/syncthing/cancel.top
@@ -0,0 +1,3 @@
+base:
+  syncthing:
+    - syncthing.configure
diff --git a/syncthing/clean.sls b/syncthing/clean.sls
new file mode 100644
index 0000000..bdd285f
--- /dev/null
+++ b/syncthing/clean.sls
@@ -0,0 +1,22 @@
+# vim: set syntax=yaml ts=2 sw=2 sts=2 et :
+#
+#
+#
+
+syncthing_down:
+  qvm.shutdown:
+    - name: syncthing
+    - flags: 
+      - force
+
+syncthing_revert_policy:
+  file.replace:
+    - name: /etc/qubes/policy.d/30-user.policy
+    - pattern: 'qubes.Syncthing.*'
+    - repl: ''
+
+syncthing_default_policy:
+  file.prepend:
+    - name: /etc/qubes/policy.d/30-user.policy
+    - text: 'qubes.Syncthing  *  @anyvm  @anyvm  deny'
+    - makedirs: True