diff --git a/k8s/bootstrap/deployment.yaml.j2 b/k8s/bootstrap/deployment.yaml.j2
index 757671d..ec92961 100644
--- a/k8s/bootstrap/deployment.yaml.j2
+++ b/k8s/bootstrap/deployment.yaml.j2
@@ -136,12 +136,14 @@ spec:
               value: 12GiB
             - name: IPFS_TELEMETRY
               value: "off"
-            # kubo logs only errors by default. Info adds libp2p's and the
-            # DHT's warnings and info lines, which ProbeLab asked us to ship
-            # for them; it has no per-connection peer IDs or agent versions.
+            # ProbeLab counts the distinct peers and agent versions that reach
+            # the bootstrappers. kubo's peerlog plugin (Plugins in
+            # roles/bootstrap/files/kubo-config.json) logs both, with no IPs,
+            # at info whatever this level says. Info for everything else added
+            # relay lines, 90% of the volume, and no agent versions.
             # JSON, as on needle, so Loki can parse the fields.
             - name: GOLOG_LOG_LEVEL
-              value: info
+              value: error
             - name: GOLOG_LOG_FMT
               value: json
             # RPC bearer token for probes and CLI calls (kubo's --api-auth takes
diff --git a/roles/bootstrap/files/kubo-config.json b/roles/bootstrap/files/kubo-config.json
index 330f6ae..1c72a61 100644
--- a/roles/bootstrap/files/kubo-config.json
+++ b/roles/bootstrap/files/kubo-config.json
@@ -154,7 +154,13 @@
     "RemoteServices": {}
   },
   "Plugins": {
-    "Plugins": null
+    "Plugins": {
+      "peerlog": {
+        "Config": {
+          "Enabled": true
+        }
+      }
+    }
   },
   "Provide": {
     "DHT": {},