diff --git a/kubernetes/apps/matrix/synapse/app/ocirepository.yaml b/kubernetes/apps/matrix/synapse/app/ocirepository.yaml
index 102de2422b..ffd462b787 100644
--- a/kubernetes/apps/matrix/synapse/app/ocirepository.yaml
+++ b/kubernetes/apps/matrix/synapse/app/ocirepository.yaml
@@ -9,5 +9,5 @@ spec:
     mediaType: application/vnd.cncf.helm.chart.content.v1.tar+gzip
     operation: copy
   ref:
-    tag: 3.12.31
+    tag: 3.12.33
   url: oci://ghcr.io/home-operations/charts-mirror/matrix-synapse
diff --git a/kubernetes/apps/matrix/synapse/app/resources/mas_config.yaml b/kubernetes/apps/matrix/synapse/app/resources/mas_config.yaml
index 9c865befc0..0b48b3c05a 100644
--- a/kubernetes/apps/matrix/synapse/app/resources/mas_config.yaml
+++ b/kubernetes/apps/matrix/synapse/app/resources/mas_config.yaml
@@ -1,9 +1,4 @@
-experimental_features:
-  msc3861:
-    enabled: true
-    issuer: "https://mas.${SECRET_DOMAIN}"
-    client_id: 0000000000000000000SYNAPSE
-    client_auth_method: client_secret_basic
-    client_secret: "{{ .SYNAPSE_MAS_CLIENT_SECRET }}"
-    admin_token: "{{ .SYNAPSE_ADMIN_TOKEN }}"
-    introspection_endpoint: "http://mas.matrix.svc.cluster.local:8080/oauth2/introspect"
+matrix_authentication_service:
+  enabled: true
+  secret: "{{ .SYNAPSE_ADMIN_TOKEN }}"
+  endpoint: "http://mas.matrix.svc.cluster.local:8080"