diff --git a/app/matrix/lib/appservice-irc.libsonnet b/app/matrix/lib/appservice-irc.libsonnet
index 2ef6905..fd51e4e 100644
--- a/app/matrix/lib/appservice-irc.libsonnet
+++ b/app/matrix/lib/appservice-irc.libsonnet
@@ -40,9 +40,9 @@
             passwordEncryptionKeySecret: null,
         },
 
-        config: kube.ConfigMap("appservice-irc-%s" % [name]) {
+        config: kube.Secret("appservice-irc-%s" % [name]) {
             metadata+: cfg.metadata,
-            data: {
+            data_: {
                 "config.yaml": std.manifestJsonEx(cfg.config, ""),
             },
         },
@@ -93,7 +93,7 @@
                 template+: {
                     spec+: {
                         volumes_: {
-                            config: kube.ConfigMapVolume(bridge.config),
+                            config: kube.SecretVolume(bridge.config),
                             data: kube.PersistentVolumeClaimVolume(bridge.dataVolume),
                             registration: { secret: { secretName: "appservice-irc-%s-registration" % [name] } },
                         } + (if cfg.passwordEncryptionKeySecret != null then {