diff --git a/modules/servers/synapse.nix b/modules/servers/synapse.nix
index 24bc9dd..466e43d 100644
--- a/modules/servers/synapse.nix
+++ b/modules/servers/synapse.nix
@@ -70,11 +70,13 @@ in
         "${cfg.host}" = {
           enableACME = true;
           forceSSL = true;
-          locations."/".extraConfig = ''
-            return 404;
-          '';
-          locations."/_matrix".proxyPass = "http://[::1]:${toString cfg.port}";
-          locations."/_synapse/client".proxyPass = "http://[::1]:${toString cfg.port}";
+          locations = {
+            "/".extraConfig = ''
+              return 404;
+            '';
+            "/_matrix".proxyPass = "http://[::1]:${toString cfg.port}";
+            "/_synapse/client".proxyPass = "http://[::1]:${toString cfg.port}";
+          };
           extraConfig = ''
             ssl_verify_client on;
             ssl_client_certificate ${config.sops.secrets."iqQCY4iAWO-ca/pem".path};