diff --git a/app-crypt/tang/files/tangd b/app-crypt/tang/files/tangd
new file mode 100644
index 0000000000..3bca6e1b81
--- /dev/null
+++ b/app-crypt/tang/files/tangd
@@ -0,0 +1,8 @@
+# Address for tang to listen to (default: 0.0.0.0)
+ADDRESS=0.0.0.0
+
+# Port for tang to listen to (default: 8888)
+PORT=8888
+
+# Directory where keys will be stored (default: /var/db/tang)
+TANGDIR=/var/db/tang
diff --git a/app-crypt/tang/files/tangd.initd b/app-crypt/tang/files/tangd.initd
index 4b7e429917..fc3c25c03c 100644
--- a/app-crypt/tang/files/tangd.initd
+++ b/app-crypt/tang/files/tangd.initd
@@ -2,15 +2,10 @@
 # Copyright 2022 Gentoo Authors
 # Distributed under the terms of the GNU General Public License v2
 
-port=8888
-bind=0.0.0.0
-tangd=/usr/libexec/tangd
-tangdir=/var/db/tang
-
 name="tang daemon"
 description="Tang binding daemon"
 command=/usr/bin/socat
 pidfile="/var/run/${RC_SVCNAME}.pid"
 command_user="tang"
-command_args="TCP-LISTEN:${port},bind=${bind},fork SYSTEM:'${tangd} ${tangdir}'"
+command_args="TCP-LISTEN:${PORT},bind=${ADDRESS},fork SYSTEM:'/usr/libexec/tangd ${TANGDIR}'"
 command_background=true
diff --git a/app-crypt/tang/tang-11.ebuild b/app-crypt/tang/tang-11.ebuild
index 380717499c..a47a71abb4 100644
--- a/app-crypt/tang/tang-11.ebuild
+++ b/app-crypt/tang/tang-11.ebuild
@@ -26,6 +26,8 @@ src_install(){
 	newinitd "${FILESDIR}"/tangd.initd tangd
 	systemd_dounit ${FILESDIR}/tangd.service
 
+	doconfd "${FILESDIR}"/tangd
+
 	dodir /var/db/tang
 	keepdir /var/db/tang
 	fowners tang:tang /var/db/tang