diff --git a/matrix/conduit-config.toml b/matrix/conduit-config.toml
new file mode 100644
index 00000000..b3f4800a
--- /dev/null
+++ b/matrix/conduit-config.toml
@@ -0,0 +1,48 @@
+# Conduit Homeserver Configuration
+# Generated by Ezra as burn-mode artifact for timmy-config#166
+# See docs/matrix-deployment.md for prerequisites
+
+[global]
+# Server name - MUST match SRV records and client .well-known
+server_name = "tactical.local"
+
+# Database - SQLite for single-node deployment
+database_path = "/data/conduit.db"
+
+# Port for client-server API (behind Traefik)
+port = 6167
+
+# Enable federation (server-to-server communication)
+enable_federation = true
+
+# Federation port (direct TLS, or behind Traefik TCP)
+federation_port = 8448
+
+# Max upload size (10MB default)
+max_request_size = 10485760
+
+# Media directory
+media_path = "/media"
+
+# Registration - initially closed, manual invites only
+allow_registration = false
+
+[global.well_known]
+# Client .well-known - redirects to matrix.tactical.local
+client = "https://matrix.tactical.local"
+server = "matrix.tactical.local:8448"
+
+[logging]
+# Log to stdout (captured by Docker)
+level = "info"
+
+# Optional: structured JSON logging for log aggregation
+# format = "json"
+
+[synchronization]
+# Idle connection timeout for sync requests (seconds)
+idle_timeout = 300
+
+[emergency]
+# Admin contact for federation/server notices
+admin_email = "admin@tactical.local"