diff --git a/manifests/access-control-rule.yaml b/manifests/access-control-rule.yaml
new file mode 100644
index 0000000..cefe463
--- /dev/null
+++ b/manifests/access-control-rule.yaml
@@ -0,0 +1,7 @@
+apiVersion: authelia.huizinga.dev/v1
+kind: AccessControlRule
+metadata:
+  name: tunnel
+spec:
+  domain: "*.tunnel.${domain}"
+  policy: one_factor
diff --git a/manifests/config-map-authelia-acl.yaml b/manifests/config-map-authelia-acl.yaml
deleted file mode 100644
index 42c2f27..0000000
--- a/manifests/config-map-authelia-acl.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: authelia-acl
-  annotations:
-    config.huizinga.dev/fragment: authelia-acl
-data:
-  rules: |
-    - domain: "*.tunnel.${domain}"
-      policy: one_factor
diff --git a/manifests/kustomization.yaml b/manifests/kustomization.yaml
index 876272c..b8c2c51 100644
--- a/manifests/kustomization.yaml
+++ b/manifests/kustomization.yaml
@@ -9,4 +9,4 @@ resources:
   - ./service.yaml
   - ./certificate.yaml
   - ./ingress-route.yaml
-  - ./config-map-authelia-acl.yaml
+  - ./access-control-rule.yaml