diff --git a/roles/custom/matrix-synapse/templates/synapse/worker.yaml.j2 b/roles/custom/matrix-synapse/templates/synapse/worker.yaml.j2
index 738f0fa33..4c1306c0c 100644
--- a/roles/custom/matrix-synapse/templates/synapse/worker.yaml.j2
+++ b/roles/custom/matrix-synapse/templates/synapse/worker.yaml.j2
@@ -28,7 +28,11 @@ worker_log_config: /data/{{ matrix_server_fqn_matrix }}.log.config
   {% set http_resources = http_resources + ['client'] %}
 {% endif %}
 {% if matrix_synapse_worker_details.type == 'media_repository' %}
-  {% set http_resources = http_resources + ['media'] %}
+  {#
+    Handling authenticated media endpoints (`/_matrix/client/VERSION/media/` and `/_matrix/federation/v1/media/`)
+    requires serving the client and federation resources.
+  #}
+  {% set http_resources = http_resources + ['media', 'client', 'federation'] %}
 {% endif %}
 
 {% set replication_http_resources = [] %}