diff --git a/clients/quadraticserver/matrix/draupnir.nix b/clients/quadraticserver/matrix/draupnir.nix
new file mode 100644
index 0000000..316f0e3
--- /dev/null
+++ b/clients/quadraticserver/matrix/draupnir.nix
@@ -0,0 +1,30 @@
+{ config, ... }:
+{
+  services.draupnir = {
+    enable = true;
+    settings = rec {
+      homeserverUrl = config.services.matrix-continuwuity.settings.global.well_known.client;
+      rawHomeserverUrl = homeserverUrl;
+
+      managementRoom = "#moderators:${config.services.matrix-continuwuity.settings.global.server_name}";
+
+      autojoinOnlyIfManager = false;
+      protectAllJoinedRooms = true;
+
+      roomStateBackingStore.enabled = false;
+
+      commands = {
+        allowNoPrefix = true;
+        symbolPrefixes = [ "/" ];
+        ban.defaultReasons = [
+          "spam"
+          "advertising"
+          "harassment"
+          "troll"
+        ];
+      };
+
+    };
+    secrets.accessToken = config.age.secrets."draupnir.age".path;
+  };
+}
diff --git a/secrets/draupnir.age b/secrets/draupnir.age
new file mode 100644
index 0000000..2e07de5
--- /dev/null
+++ b/secrets/draupnir.age
@@ -0,0 +1,8 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZLUVVkUSBhMGxO
+UkNzTFFRcDlJaXZvNTBUSjhjWTkyK01IWE9LbCtCUkljNlZHd1NBCnhySTFxdEgw
+Vmo1dXhTN0ZJcVc2c2FmaGIrME05YnJVVlVsc2NZUVpYQ2cKLT4gei1ncmVhc2Ug
+fGozICFscCBfL1F7VAp6UzQKLS0tIFdDSXMxV0I5TzFIRDdyekp5Y3g4Q0F3RnFz
+cDJkK2xPYlBIY2FkY0xnVnMKYHxOe5Ys0EkCyBxrSw9//P+ADkd0RPiObUHTbup7
+1uCgdrHZwQInfnzdyMVmQ5ZllMlT6jIyKyf0ST9tSoIA/jw=
+-----END AGE ENCRYPTED FILE-----