diff --git a/charts/spire/README.md b/charts/spire/README.md
index 775c3ce..7d10ba5 100644
--- a/charts/spire/README.md
+++ b/charts/spire/README.md
@@ -67,7 +67,7 @@ Kubernetes: `>=1.19.0-0`
 | oidc.letsEncrypt.emailAddress | string | `"letsencrypt@example.org"` |  |
 | oidc.logLevel | string | `"INFO"` |  |
 | oidc.service.port | int | `80` |  |
-| oidc.service.type | string | `"NodePort"` |  |
+| oidc.service.type | string | `"ClusterIP"` |  |
 | podAnnotations | object | `{}` |  |
 | podSecurityContext | object | `{}` |  |
 | replicaCount | int | `1` |  |
@@ -81,7 +81,7 @@ Kubernetes: `>=1.19.0-0`
 | server.image.repository | string | `"gcr.io/spiffe-io/spire-server"` |  |
 | server.image.tag | string | `""` |  |
 | server.service.port | int | `8081` |  |
-| server.service.type | string | `"NodePort"` |  |
+| server.service.type | string | `"ClusterIP"` |  |
 | serviceAccount.annotations | object | `{}` |  |
 | serviceAccount.create | bool | `true` |  |
 | serviceAccount.name | string | `""` |  |
diff --git a/charts/spire/values.yaml b/charts/spire/values.yaml
index 28e2bf5..c7cac43 100644
--- a/charts/spire/values.yaml
+++ b/charts/spire/values.yaml
@@ -25,7 +25,7 @@ server:
     storageClass: null
 
   service:
-    type: NodePort
+    type: ClusterIP
     port: 8081
 
 oidc:
@@ -39,7 +39,7 @@ oidc:
   logLevel: INFO
 
   service:
-    type: NodePort
+    type: ClusterIP
     port: 80
 
   ingress: