diff --git a/machines/web01/_configuration.nix b/machines/web01/_configuration.nix
index 977983e..bbd90a1 100644
--- a/machines/web01/_configuration.nix
+++ b/machines/web01/_configuration.nix
@@ -11,6 +11,7 @@ lib.extra.mkConfig {
     "castopod"
     "metis"
     "linkal"
+    "matterbridge"
     "ntfy-sh"
     "plausible"
     "wordpress"
diff --git a/machines/web01/matterbridge.nix b/machines/web01/matterbridge.nix
new file mode 100644
index 0000000..1e133d9
--- /dev/null
+++ b/machines/web01/matterbridge.nix
@@ -0,0 +1,10 @@
+{ config, ... }:
+
+{
+  services.matterbridge = {
+    enable = true;
+    configPath = config.age.secrets."matterbridge-config_file".path;
+  };
+
+  dgn-secrets.matches."^matterbridge-.*$" = { owner = "matterbridge"; };
+}
diff --git a/machines/web01/secrets/matterbridge-config_file b/machines/web01/secrets/matterbridge-config_file
new file mode 100644
index 0000000..7ba4c5f
Binary files /dev/null and b/machines/web01/secrets/matterbridge-config_file differ
diff --git a/machines/web01/secrets/secrets.nix b/machines/web01/secrets/secrets.nix
index 87eaede..89d67fc 100644
--- a/machines/web01/secrets/secrets.nix
+++ b/machines/web01/secrets/secrets.nix
@@ -3,6 +3,7 @@ let
   publicKeys = lib.getNodeKeys "web01";
 in lib.setDefault { inherit publicKeys; } [
   "acme-certs_secret"
+  "matterbridge-config_file"
   "named-bind_dnskeys_conf"
   "ntfy_sh-environment_file"
   "plausible_admin-user-password-file"