diff --git a/assets/knative/app-config.yaml b/assets/knative/app-config.yaml
new file mode 100644
index 0000000..1b5a6ba
--- /dev/null
+++ b/assets/knative/app-config.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Secret
+metadata:
+  name: app-config
+  namespace: default
+  annotations:
+    replicator.v1.mittwald.de/replicate-to: "initium,initium.+"
+type: Opaque
+data:
+  db_uname: YWRtaW4K
+  db_pwd: YWRtaW4K
diff --git a/assets/knative/service.yaml.tmpl b/assets/knative/service.yaml.tmpl
index 8c3abab..8c0e6bc 100644
--- a/assets/knative/service.yaml.tmpl
+++ b/assets/knative/service.yaml.tmpl
@@ -9,3 +9,6 @@ spec:
       containers:
         - image: {{ .RemoteTag }}
           imagePullPolicy: Always
+          envFrom:
+            - secretRef:
+                name: app-config