diff --git a/base/media/livekit-values.yaml b/base/media/livekit-values.yaml
index 1ed6fc9..5180184 100644
--- a/base/media/livekit-values.yaml
+++ b/base/media/livekit-values.yaml
@@ -36,3 +36,8 @@ deployment:
     requests:
       memory: 64Mi
       cpu: 100m
+
+# Recreate strategy: hostPorts (TURN UDP relay range) block RollingUpdate —
+# the new pod cannot schedule while the old one still holds the host ports.
+deploymentStrategy:
+  type: Recreate
diff --git a/overlays/local/values-resources.yaml b/overlays/local/values-resources.yaml
index 0a8ef71..05ab888 100644
--- a/overlays/local/values-resources.yaml
+++ b/overlays/local/values-resources.yaml
@@ -74,9 +74,16 @@ spec:
     spec:
       containers:
         - name: opensearch
+          env:
+            # Reduce JVM heap so it fits within the 512Mi container limit.
+            # Base sets -Xms512m -Xmx1g which immediately OOMs the container.
+            - name: OPENSEARCH_JAVA_OPTS
+              value: "-Xms192m -Xmx256m"
           resources:
             limits:
               memory: 512Mi
+            requests:
+              memory: 256Mi
 
 ---
 apiVersion: apps/v1
@@ -121,6 +128,8 @@ spec:
         - name: login-ui
           resources:
             limits:
+              memory: 192Mi
+            requests:
               memory: 64Mi
 
 ---