diff --git a/kube/deploy/apps/media/_deps/ns.yaml b/kube/deploy/apps/media/_deps/ns.yaml
index d6b21042..ce3a3b00 100644
--- a/kube/deploy/apps/media/_deps/ns.yaml
+++ b/kube/deploy/apps/media/_deps/ns.yaml
@@ -5,6 +5,6 @@ metadata:
   name: media
   labels:
     kustomize.toolkit.fluxcd.io/prune: disabled
-    pod-security.kubernetes.io/enforce: &ps baseline # NFS pod-level volumeMount
+    pod-security.kubernetes.io/enforce: &ps privileged # NFS pod-level volumeMount
     pod-security.kubernetes.io/audit: *ps
     pod-security.kubernetes.io/warn: *ps