diff --git a/remodel/k8s/apps/homepage/application-set.yaml b/remodel/k8s/apps/homepage/application-set.yaml
index e02d565..20e1b4c 100644
--- a/remodel/k8s/apps/homepage/application-set.yaml
+++ b/remodel/k8s/apps/homepage/application-set.yaml
@@ -30,5 +30,5 @@ spec:
         namespace: argocd
       syncPolicy:
         automated:
-          selfHeal: true
+          selfHeal: false
           prune: true
\ No newline at end of file
diff --git a/remodel/k8s/apps/homepage/blog/remark42/deployment.yaml b/remodel/k8s/apps/homepage/blog/remark42/deployment.yaml
index 3230046..f8894fe 100644
--- a/remodel/k8s/apps/homepage/blog/remark42/deployment.yaml
+++ b/remodel/k8s/apps/homepage/blog/remark42/deployment.yaml
@@ -18,6 +18,8 @@ spec:
       labels:
         app: remark42
     spec:
+      nodeSelector:
+        topology.kubernetes.io/zone: euclid
       securityContext:
         runAsNonRoot: true
         runAsUser: 65534
@@ -29,6 +31,11 @@ spec:
       containers:
         - name: remark42
           image: umputun/remark42:v1.12.1
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: [ "ALL" ]
           ports:
             - name: http
               containerPort: 8080
@@ -44,11 +51,6 @@ spec:
           volumeMounts:
             - name: remark42
               mountPath: /srv/var
-          securityContext:
-            allowPrivilegeEscalation: false
-            readOnlyRootFilesystem: true
-            capabilities:
-              drop: [ "ALL" ]
           resources:
             requests:
               cpu: 50m
@@ -60,4 +62,3 @@ spec:
         - name: remark42
           persistentVolumeClaim:
             claimName: remark42
-      
\ No newline at end of file