diff --git a/nextcloud/application.yaml b/nextcloud/application.yaml
index 1582451..247f478 100644
--- a/nextcloud/application.yaml
+++ b/nextcloud/application.yaml
@@ -21,9 +21,21 @@ spec:
       key: REDIS_PASSWORD
       name: dragonfly-auth
   replicas: 3
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: topology.kubernetes.io/zone
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: redis
+          app.kubernetes.io/part-of: dragonfly
   resources:
     limits:
-      memory: 5Gi
+      cpu: 600m
+      memory: 500Mi
+    requests:
+      cpu: 100m
+      memory: 30Mi
 ---
 apiVersion: codemowers.cloud/v1beta1
 kind: OIDCClient
@@ -53,6 +65,7 @@ metadata:
   labels:
     app.kubernetes.io/name: nextcloud
 spec:
+  revisionHistoryLimit: 0
   serviceName: nextcloud
   replicas: 1
   selector:
@@ -75,6 +88,13 @@ spec:
       containers:
         - name: nextcloud
           image: nextcloud@sha256:072d9d3b8428d6b31fe7ed603737d4173f0ca85c0f1d0d8607fd4741fdfa49a9
+          resources:
+            limits:
+              cpu: 4000m
+              memory: 2Gi
+            requests:
+              cpu: 400m
+              memory: 500Mi
           readinessProbe:
             exec:
               command: