diff --git a/apps/pangolin/pangolin-config.yaml b/apps/pangolin/pangolin-config.yaml
new file mode 100644
index 0000000..ab532bf
--- /dev/null
+++ b/apps/pangolin/pangolin-config.yaml
@@ -0,0 +1,20 @@
+---
+# Pangolin ConfigMap
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: pangolin-config
+  namespace: pangolin
+data:
+  config.toml: |
+    # Pangolin Configuration
+    url = "https://pangolin.basicstack.de"
+
+    [database]
+    path = "/data/pangolin.db"
+
+    [oidc]
+    enabled = true
+    issuer = "https://auth.basicstack.de"
+    callback_url = "https://pangolin.basicstack.de/auth/callback"
+    scopes = "openid profile email groups"
diff --git a/apps/pangolin/pangolin-deployment.yaml b/apps/pangolin/pangolin-deployment.yaml
index 4304687..64241c6 100644
--- a/apps/pangolin/pangolin-deployment.yaml
+++ b/apps/pangolin/pangolin-deployment.yaml
@@ -72,6 +72,9 @@ spec:
         volumeMounts:
         - name: pangolin-data
           mountPath: /data
+        - name: config
+          mountPath: /app/config.toml
+          subPath: config.toml
         resources:
           requests:
             memory: "256Mi"
@@ -99,6 +102,9 @@ spec:
       - name: pangolin-data
         persistentVolumeClaim:
           claimName: pangolin-data
+      - name: config
+        configMap:
+          name: pangolin-config
 ---
 # Pangolin Service
 apiVersion: v1