Syncthing quite recently added support for this type of use case: https://docs.syncthing.net/users/untrusted.html

They do warn that this feature is in beta/testing, so I wouldn't trust it with super critical data.