diff --git a/apps/base/authentik/cnpg_cluster.yaml b/apps/base/authentik/cnpg_cluster.yaml
index 350c55a..a7490f7 100644
--- a/apps/base/authentik/cnpg_cluster.yaml
+++ b/apps/base/authentik/cnpg_cluster.yaml
@@ -106,10 +106,12 @@ spec:
   resources:
     limits:
       cpu: 500m
-      memory: 512Mi
+      # 512Mi OOMKilled replicas under load (shared_buffers 128MB +
+      # max_connections 200 leave no headroom) — see incident 2026-07-28.
+      memory: 1Gi
     requests:
       cpu: 50m
-      memory: 256Mi
+      memory: 512Mi
   smartShutdownTimeout: 180
   startDelay: 3600
   stopDelay: 1800