diff --git a/kube/deploy/apps/gotosocial/ks.yaml b/kube/deploy/apps/gotosocial/ks.yaml
index ca627333..da3dd19d 100644
--- a/kube/deploy/apps/gotosocial/ks.yaml
+++ b/kube/deploy/apps/gotosocial/ks.yaml
@@ -62,6 +62,7 @@ spec:
       PG_SC: "local"
       PG_CONFIG_VERSION: "15.2-11"
       PG_CONFIG_SIZE: "20Gi"
+      PG_DUMP_LOCAL_MEM: "2Gi"
   patches:
     - patch: |
         $patch: delete
diff --git a/kube/deploy/core/db/pg/clusters/template/crunchy.yaml b/kube/deploy/core/db/pg/clusters/template/crunchy.yaml
index 59c83bc0..4895b946 100644
--- a/kube/deploy/core/db/pg/clusters/template/crunchy.yaml
+++ b/kube/deploy/core/db/pg/clusters/template/crunchy.yaml
@@ -16,7 +16,8 @@ spec:
       metadata:
         labels:
           egress.home.arpa/apiserver: "allow"
-          egress.home.arpa/r2: "allow"
+          #egress.home.arpa/r2: "allow" # TODO: this uses L7 DNS netpols, and each WAL push makes a new DNS request, on top of recursing ndots per request, causing Cilium dnsproxy to crash
+          egress.home.arpa/world: "allow"
           s3.home.arpa/store: "rgw-${CLUSTER_NAME}"
           s3.home.arpa/minio-nas: "allow"
           prom.home.arpa/kps: "allow"
diff --git a/kube/deploy/core/db/pg/clusters/template/dump-local.yaml b/kube/deploy/core/db/pg/clusters/template/dump-local.yaml
index 08470d55..85dd3889 100644
--- a/kube/deploy/core/db/pg/clusters/template/dump-local.yaml
+++ b/kube/deploy/core/db/pg/clusters/template/dump-local.yaml
@@ -73,7 +73,7 @@ spec:
               resources:
                 limits:
                   cpu: 1000m
-                  memory: 1Gi
+                  memory: ${PG_DUMP_LOCAL_MEM:=1Gi}
 ---
 apiVersion: v1
 kind: PersistentVolume