diff --git a/modules/audit-logger/module.json b/modules/audit-logger/module.json
index 72bf5b9..4528f02 100644
--- a/modules/audit-logger/module.json
+++ b/modules/audit-logger/module.json
@@ -1,15 +1,46 @@
 {
   "module": "audit-logger",
   "version": "1",
-  "consumes": [
-    "#"
-  ],
+  "consumes": ["#"],
+  "own-secrets": {
+    "broker": "/var/lib/audit-logger/broker"
+  },
+  "build": {
+    "artifacts": [
+      {
+        "name": "runtime",
+        "kind": "upstream",
+        "from": "registry.invalid/mesh-runtime-audit@sha256:0000000000000000000000000000000000000000000000000000000000000000"
+      }
+    ]
+  },
   "resources": [
     {
-      "id": "log",
+      "id": "state",
       "type": "directory",
       "path": "/var/lib/audit-logger",
       "mode": "0700"
+    },
+    {
+      "id": "trail",
+      "type": "directory",
+      "path": "/var/lib/audit-logger/trail",
+      "mode": "0700"
+    },
+    {
+      "id": "run",
+      "type": "container",
+      "name": "mesh-audit-logger",
+      "artifact": "runtime",
+      "network": "host",
+      "volumes": [
+        "/var/lib/audit-logger/broker:/run/secrets/broker:ro",
+        "/var/lib/audit-logger/trail:/trail"
+      ],
+      "env": {
+        "MESH_BROKER_FILE": "/run/secrets/broker",
+        "AUDIT_LOG": "/trail/audit.log"
+      }
     }
   ]
 }