diff --git a/matrix/synapse/workers.md b/matrix/synapse/workers.md
index 6beb8e2..282eaf6 100644
--- a/matrix/synapse/workers.md
+++ b/matrix/synapse/workers.md
@@ -491,7 +491,7 @@ ReloadPropagatedFrom=matrix-synapse.target
 
 [Service]
 RuntimeDirectory=matrix-synapse
-RuntimeDirectoryMode=0775
+RuntimeDirectoryMode=0770
 RuntimeDirectoryPreserve=yes
 
 [Install]
@@ -573,3 +573,15 @@ systemctl start matrix-synapse.target
 This should start `matrix-synapse.service` first, the main worker. After that
 all the workers should be started too. Check if the correct sockets appear and
 if there are any error messages in the logs.
+
+
+# nginx
+
+We may have a lot of workers, but if nginx doesn't forward traffic to the
+correct worker(s), it won't work. We're going to have to change nginx's
+configuration quite a bit.
+
+See [Deploying a Synapse Homeserver with
+Docker](https://tcpipuk.github.io/synapse/deployment/nginx.html) for the
+inspiration. This details a Docker installation, which we don't have, but the
+reasoning behind it applies to our configuration too.