diff --git a/dot/matterbridge.nix b/dot/matterbridge.nix
new file mode 100644
index 0000000..a532294
--- /dev/null
+++ b/dot/matterbridge.nix
@@ -0,0 +1,26 @@
+{ token }: ''
+  [general]
+  RemoteNickFormat = "{NICK}"
+
+  [telegram]
+    [telegram.kmein]
+    Token = "${token}"
+    MessageFormat = "HTMLNick"
+
+  [irc]
+    [irc.freenode]
+    Server = "irc.freenode.net:6667"
+    Nick = "kmein_bridge"
+
+  [[gateway]]
+  name = "krebs-bridge"
+  enable = true
+
+    [[gateway.inout]]
+    account = "irc.freenode"
+    channel = "#krebs"
+
+    [[gateway.inout]]
+    account = "telegram.kmein"
+    channel = "-330372458"
+''
diff --git a/dot/matterbridge.toml b/dot/matterbridge.toml
deleted file mode 100644
index 6a3dd2a..0000000
--- a/dot/matterbridge.toml
+++ /dev/null
@@ -1,21 +0,0 @@
-[telegram]
-  [telegram.kmein]
-    Token=
-    MessageFormat="HTMLNick"
-
-[irc]
-  [irc.freenode]
-    server = irc.freenode.net:6667
-    Nick = kmein_bridge
-
-[[gateway]]
-name = "krebs-bridge"
-enable = true
-
-  [[gateway.inout]]
-  account = "irc.freenode"
-  channel = "#krebs"
-
-  [[gateway.inout]]
-  account = "telegram.kmein"
-  channel = "-330372458"
diff --git a/systems/catullus/configuration.nix b/systems/catullus/configuration.nix
index c08b8bb..25d65e3 100644
--- a/systems/catullus/configuration.nix
+++ b/systems/catullus/configuration.nix
@@ -86,7 +86,9 @@ in {
     {
       services.matterbridge = {
         enable = true;
-        configPath = toString <dot/matterbridge.toml>;
+        configFile = import <dot/matterbridge.nix> {
+          token = lib.strings.removeSuffix "\n" (builtins.readFile <secrets/telegram/kmein.token>);
+        };
       };
     }
     {