diff --git a/clients/quadraticserver/matrix/draupnir.nix b/clients/quadraticserver/matrix/draupnir.nix
new file mode 100644
index 0000000..316f0e3
--- /dev/null
+++ b/clients/quadraticserver/matrix/draupnir.nix
@@ -0,0 +1,30 @@
+{ config, ... }:
+{
+  services.draupnir = {
+    enable = true;
+    settings = rec {
+      homeserverUrl = config.services.matrix-continuwuity.settings.global.well_known.client;
+      rawHomeserverUrl = homeserverUrl;
+
+      managementRoom = "#moderators:${config.services.matrix-continuwuity.settings.global.server_name}";
+
+      autojoinOnlyIfManager = false;
+      protectAllJoinedRooms = true;
+
+      roomStateBackingStore.enabled = false;
+
+      commands = {
+        allowNoPrefix = true;
+        symbolPrefixes = [ "/" ];
+        ban.defaultReasons = [
+          "spam"
+          "advertising"
+          "harassment"
+          "troll"
+        ];
+      };
+
+    };
+    secrets.accessToken = config.age.secrets."draupnir.age".path;
+  };
+}
diff --git a/secrets/draupnir.age b/secrets/draupnir.age
new file mode 100644
index 0000000..87b0951
--- /dev/null
+++ b/secrets/draupnir.age
@@ -0,0 +1,9 @@
+-----BEGIN AGE ENCRYPTED FILE-----
+YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IHNzaC1lZDI1NTE5IFZLUVVkUSBJNk1z
+bnkzMmRQZkk2bWxYS21taTBIU0l3UThDUit4L3REVStwOGxjRlI4CnJYTmFKNlJr
+dlpYVDNRRjlySU5qNWdZL1NyZ0tiS3V3VDNlTE9RTWk5MUEKLT4gcS1ncmVhc2Ug
+dEJzTkwzd2cgRWBUCjl0b0pXa09zMW96K0h1UHZlY0VDNmhiUVhLR09nbHR3QVo2
+MmtlYmxGaE0wWDZVQkl5S3gyMkRhVEtjCi0tLSBYdm1xcUJUQU1NOHZUNkxpR21t
+Ky9tQzZqT0RmTTZ0N3NzQXFVeXI0RFRRCjZ+nvQ+J16Ar1Ri7F2ga7L6CiBCBzwN
+HGtI+4jU4IMoD7Z0yU9sTkxxC48WVEeL08D3mRNnKulgOOMgkjmvnCi/
+-----END AGE ENCRYPTED FILE-----