diff --git a/config/hosts/wind/services/synapse.nix b/config/hosts/wind/services/synapse.nix
index 23f51db..e88e79e 100644
--- a/config/hosts/wind/services/synapse.nix
+++ b/config/hosts/wind/services/synapse.nix
@@ -24,46 +24,48 @@
     report_stats = true;
     withJemalloc = true;
 
-		extraConfig = ''
+    extraConfig = ''
+password_config:
+  enabled: false
 oidc_providers:
   - idp_id: authentik
     idp_name: authentik
     discover: true
-    issuer: "https://auth.graven.dev/application/o/matrix-synapse/"
-    client_id: "b680e49c584fad37610d465b1ea270e8daf7ce50"
-    client_secret: "d404b3bca1e7d2073a79b4e6d60b64505e2249a7fa6b5a2a0f499ab1955b93e269cddff4c8ce37c8ad929e16cdab5640ec2c25cec36ed73e67b753b6d4689cac"
+    issuer: "https://auth.graven.dev/application/o/synapse/"
+    client_id: "7a77036d3b360265895f2ab5a51264ba586c93d5"
+    client_secret: "a9f9146fd13338230481a71c824d122bfb5e8a2118f2cdaf882746ad6726aeecd50ef522338acec89d3f8ccb8014124e022a6af6769807ea4271931f219a3f55"
+    allow_existing_users: true
     scopes:
       - "openid"
       - "profile"
       - "email"
     user_mapping_provider:
       config:
-        localpart_template: "{{ '{{ user.name }}' }}"
-        display_name_template: "{{ '{{ user.name|capitalize }}' }}"
-				'';
-
+        localpart_template: "{{ user.name }}"
+        display_name_template: "{{ user.name|capitalize }}"
+    '';
 
     logConfig = ''
 version: 1
 
 formatters:
-		precise:
-				format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
+    precise:
+        format: '%(asctime)s - %(name)s - %(lineno)d - %(levelname)s - %(request)s - %(message)s'
 
 handlers:
-		console:
-				class: logging.StreamHandler
-				formatter: precise
+    console:
+        class: logging.StreamHandler
+        formatter: precise
 
 loggers:
-		synapse.storage.SQL:
-				# beware: increasing this to DEBUG will make synapse log sensitive
-				# information such as access tokens.
-				level: WARN
+    synapse.storage.SQL:
+        # beware: increasing this to DEBUG will make synapse log sensitive
+        # information such as access tokens.
+        level: WARN
 
 root:
-		level: WARN
-		handlers: [console]
+    level: WARN
+    handlers: [console]
 
 disable_existing_loggers: false
     '';