diff --git a/ops/nixos/bvm-matrix/default.nix b/ops/nixos/bvm-matrix/default.nix
index b39ede2563..1f8401f1b5 100644
--- a/ops/nixos/bvm-matrix/default.nix
+++ b/ops/nixos/bvm-matrix/default.nix
@@ -92,6 +92,7 @@ in {
   services.matrix-synapse = {
     enable = true;
     server_name = "zxcvbnm.ninja";
+    macaroon_secret_key = machineSecrets.macaroonSecretKey;
     listeners = [{
       port = 8008;
       bind_address = "::1";