diff --git a/swarm/authentik.yaml b/swarm/authentik.yaml
index 19eedcf..9be9f94 100644
--- a/swarm/authentik.yaml
+++ b/swarm/authentik.yaml
@@ -17,10 +17,18 @@ services:
     networks:
       - authentik
     deploy:
+      restart_policy:
+        condition: any
+        delay: 5s
+        max_attempts: 3
+        window: 120s
       placement:
         constraints:
+          - node.platform.arch != arm
+          - node.platform.arch != aarch64
           - node.hostname == znas
       labels:
+        gremlin.version: "2026-04-1"
         gremlin.uid.exempt: "true"
         gremlin.uid.reason: "Postgres manages its own internal users"
         gremlin.caddy.skip: "true"
@@ -92,6 +100,7 @@ services:
         homepage.icon: authentik.png
         homepage.href: https://auth.netgrimoire.com
         homepage.description: Account Manager
+        diun.enable: "true"
 
         monitor.name: Authentik
         monitor.url: https://auth.netgrimoire.com