diff --git a/terraform/keycloak/terraform.tfvars b/terraform/keycloak/terraform.tfvars
index 2f6250e..cddb4f5 100644
--- a/terraform/keycloak/terraform.tfvars
+++ b/terraform/keycloak/terraform.tfvars
@@ -4,7 +4,10 @@ groups = [
   "game-servers-managers",
   "argocd-admins",
   "web-petting",
-  "Furumusic-Admins"
+  "Furumusic-Admins",
+  "meguri-admins",
+  "meguri-leads",
+  "meguri-team"
 ]
 
 proxy_applications = {
@@ -111,6 +114,13 @@ oauth2_applications = {
     web_origins               = ["https://auth.matrix.hexor.cy"]
     post_logout_redirect_uris = ["https://auth.matrix.hexor.cy/*"]
   }
+  # Meguri matches the group names below exactly (the groups mapper sends plain names, not paths):
+  # hexor-admin and meguri-admins = instance administrators, meguri-leads / meguri-team = the "Core" workspace.
+  Meguri = {
+    redirect_uris             = ["https://meguri.hexor.cy/api/oidc/callback"]
+    web_origins               = ["https://meguri.hexor.cy"]
+    post_logout_redirect_uris = ["https://meguri.hexor.cy/*"]
+  }
   Amnezia-Fellow = {
     redirect_uris             = ["https://awg.hexor.cy/auth/oidc/callback"]
     web_origins               = ["https://awg.hexor.cy"]