diff --git a/k8s/matrix/bridge-hookshot.yaml b/k8s/matrix/bridge-hookshot.yaml
index 5d10100..1fde8e9 100644
--- a/k8s/matrix/bridge-hookshot.yaml
+++ b/k8s/matrix/bridge-hookshot.yaml
@@ -13,6 +13,9 @@ spec:
     metadata:
       labels:
         app: hookshot
+      annotations:
+        prometheus.io/scrape: "true"
+        prometheus.io/port: "9001"
     spec:
       containers:
       - image: halfshot/matrix-hookshot:6.0.0
@@ -94,7 +97,12 @@ metadata:
   name: bridge-hookshot
   labels:
     name: bridge-hookshot
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt
 spec:
+  tls:
+    - hosts: [hookshot.janky.bot]
+      secretName: hookshot.janky.bot
   rules:
   - host: hookshot.janky.bot
     http:
diff --git a/k8s/matrix/hookshot/config.yml b/k8s/matrix/hookshot/config.yml
index 9266f12..a04db3a 100644
--- a/k8s/matrix/hookshot/config.yml
+++ b/k8s/matrix/hookshot/config.yml
@@ -7,19 +7,6 @@ bridge:
   mediaUrl: https://hookshot.janky.bot
   port: 9993
   url: http://homeserver-janky-bot:8008
-github:
-  enterpriseUrl: "https://git.janky.solutions"
-  auth:
-    id: 123
-    privateKeyFile: github-key.pem
-  webhook:
-    secret: secrettoken
-  oauth:
-    client_id: foo
-    client_secret: bar
-    redirect_uri: https://example.com/oauth/
-  defaultOptions:
-    showIssueRoomLink: false
 generic:
   allowJsTransformationFunctions: true
   enableHttpGet: false
@@ -33,7 +20,7 @@ listeners:
   resources:
   - webhooks
   - widgets
-- bindAddress: 127.0.0.1
+- bindAddress: 0.0.0.0
   port: 9001
   resources:
   - metrics