diff --git a/.claude/CLAUDE.md b/.claude/CLAUDE.md
index b1252593..72d03775 100755
--- a/.claude/CLAUDE.md
+++ b/.claude/CLAUDE.md
@@ -103,7 +103,7 @@ Repo IDs: infra=1, Website=2, finance=3, health=4, travel_blog=5, webhook-handle
 ## Service-Specific Notes
 | Service | Key Operational Knowledge |
 |---------|--------------------------|
-| Nextcloud | MaxRequestWorkers=150, needs 4Gi memory, very generous startup probe |
+| Nextcloud | MaxRequestWorkers=150, needs 8Gi limit (Apache transient memory spikes, see commit eb94144), very generous startup probe |
 | Immich | ML on SSD, disable ModSecurity (breaks streaming), CUDA for ML, frequent upgrades |
 | CrowdSec | Pin version, disable Metabase when not needed (CPU hog), LAPI scaled to 3 |
 | Frigate | GPU stall detection in liveness probe (inference speed check), high CPU |
diff --git a/stacks/actualbudget/factory/main.tf b/stacks/actualbudget/factory/main.tf
index 18614ccf..32e8dcbc 100644
--- a/stacks/actualbudget/factory/main.tf
+++ b/stacks/actualbudget/factory/main.tf
@@ -64,6 +64,15 @@ resource "kubernetes_deployment" "actualbudget" {
           port {
             container_port = 5006
           }
+          resources {
+            requests = {
+              cpu    = "15m"
+              memory = "160Mi"
+            }
+            limits = {
+              memory = "256Mi"
+            }
+          }
           volume_mount {
             name       = "data"
             mount_path = "/data"
diff --git a/stacks/calibre/main.tf b/stacks/calibre/main.tf
index d999e97e..1700a7b1 100644
--- a/stacks/calibre/main.tf
+++ b/stacks/calibre/main.tf
@@ -244,9 +244,9 @@ resource "kubernetes_deployment" "calibre-web-automated" {
               path = "/"
               port = 8083
             }
-            timeout_seconds   = 5
+            timeout_seconds   = 10
             period_seconds    = 30
-            failure_threshold = 3
+            failure_threshold = 6
           }
           resources {
             requests = {
diff --git a/stacks/forgejo/main.tf b/stacks/forgejo/main.tf
index f1c4f7e6..388ff006 100644
--- a/stacks/forgejo/main.tf
+++ b/stacks/forgejo/main.tf
@@ -95,10 +95,10 @@ resource "kubernetes_deployment" "forgejo" {
           resources {
             requests = {
               cpu    = "15m"
-              memory = "256Mi"
+              memory = "384Mi"
             }
             limits = {
-              memory = "256Mi"
+              memory = "384Mi"
             }
           }
           port {
diff --git a/stacks/novelapp/main.tf b/stacks/novelapp/main.tf
index 5e2cd4a4..14a2edfc 100644
--- a/stacks/novelapp/main.tf
+++ b/stacks/novelapp/main.tf
@@ -144,11 +144,11 @@ resource "kubernetes_deployment" "novelapp" {
           }
           resources {
             requests = {
-              memory = "128Mi"
+              memory = "640Mi"
               cpu    = "10m"
             }
             limits = {
-              memory = "256Mi"
+              memory = "640Mi"
             }
           }
         }
diff --git a/stacks/traefik/modules/traefik/main.tf b/stacks/traefik/modules/traefik/main.tf
index 3310e20a..dd17b78f 100644
--- a/stacks/traefik/modules/traefik/main.tf
+++ b/stacks/traefik/modules/traefik/main.tf
@@ -172,6 +172,7 @@ resource "helm_release" "traefik" {
         addEntryPointsLabels = true
         addServicesLabels    = true
         addRoutersLabels     = true
+        buckets              = "0.01,0.05,0.1,0.2,0.5,1.0,2.0,5.0,10.0,30.0"
       }
     }