diff --git a/kube/deploy/apps/authentik/app/hr.yaml b/kube/deploy/apps/authentik/app/hr.yaml
index d0983b24..bd221bdc 100644
--- a/kube/deploy/apps/authentik/app/hr.yaml
+++ b/kube/deploy/apps/authentik/app/hr.yaml
@@ -15,10 +15,10 @@ spec:
         namespace: flux-system
   values:
     # server is in active-active, 3 replicas seems to confuse authentik
-    replicas: 2
+    replicas: 1
     worker:
       # workers don't need leader election, thus any size works
-      replicas: 3
+      replicas: 1
     service:
       port: 9000
     ingress:
diff --git a/kube/deploy/apps/authentik/ldap/hr.yaml b/kube/deploy/apps/authentik/ldap/hr.yaml
index 58ed122c..a27f3467 100644
--- a/kube/deploy/apps/authentik/ldap/hr.yaml
+++ b/kube/deploy/apps/authentik/ldap/hr.yaml
@@ -19,7 +19,7 @@ spec:
     automountServiceAccountToken: false
     controller:
       type: deployment
-      replicas: 3
+      replicas: 2
     image:
       repository: ghcr.io/goauthentik/ldap
       tag: "2023.10.5@sha256:4f0722da4bd67e4bd261154556bc93d461c0b0f3784ab907c4177504140e5322"