diff --git a/tasks/gitea.yaml b/tasks/gitea.yaml
index 9d403c9..7cf7496 100644
--- a/tasks/gitea.yaml
+++ b/tasks/gitea.yaml
@@ -17,6 +17,19 @@
     release_namespace: gitea
     create_namespace: true
     values:
+      # Keep heavy apps off the 1-CPU node that hosts ingress-nginx; sharing it
+      # starved Nextcloud and risks the ingress / MetalLB announcement.
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - topologyKey: kubernetes.io/hostname
+              namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: ingress-nginx
+              labelSelector:
+                matchLabels:
+                  app.kubernetes.io/component: controller
+                  app.kubernetes.io/name: ingress-nginx
       image:
         pullPolicy: Always
       service: