diff --git a/passmower/dragonfly.yaml b/passmower/dragonfly.yaml
index 9c833e7..ce870d6 100644
--- a/passmower/dragonfly.yaml
+++ b/passmower/dragonfly.yaml
@@ -23,6 +23,14 @@ spec:
       key: password
       name: dragonfly-auth
   replicas: 3
+  topologySpreadConstraints:
+    - maxSkew: 1
+      topologyKey: topology.kubernetes.io/zone
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app: dragonfly-ephemeral
+          app.kubernetes.io/part-of: dragonfly
   resources:
     limits:
       cpu: 600m