diff --git a/Caddyfile b/Caddyfile
index a511d54..d7a7a62 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -255,6 +255,15 @@ sso.hubris.network {
 }
 
 
+# Matrix Synapse federation + client API.
+# No authentik gate — Synapse handles its own auth.
+matrix.hubris.network {
+	tls {
+		dns ionos {env.IONOS_AUTH_API_TOKEN}
+	}
+	reverse_proxy 192.168.8.242:8008
+}
+
 element.hubris.network {
 	tls {
 		dns ionos {env.IONOS_AUTH_API_TOKEN}