diff --git a/thelounge/statefulset.yaml b/thelounge/statefulset.yaml
index 91d89dc..9baeee5 100644
--- a/thelounge/statefulset.yaml
+++ b/thelounge/statefulset.yaml
@@ -6,6 +6,8 @@ metadata:
   name: thelounge
   annotations:
     polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
+    polaris.fairwinds.com/tagNotSpecified-exempt: "true" # allow latest tag for this app
+    polaris.fairwinds.com/topologySpreadConstraint-exempt: "true" # statefulset doesn't support multiple replicas
 spec:
   selector:
     matchLabels:
@@ -19,6 +21,7 @@ spec:
         app.kubernetes.io/instance: thelounge
     spec:
       priorityClassName: low-priority
+      automountServiceAccountToken: false
       containers:
       - name: thelounge
         image: ghcr.io/thelounge/thelounge:latest
@@ -33,9 +36,10 @@ spec:
         resources:
           requests:
             memory: "256Mi"
-            cpu: "250m"
+            cpu: "100m"
           limits:
             memory: "512Mi"
+            cpu: "500m"
   volumeClaimTemplates:
   - metadata:
       name: config
diff --git a/znc/statefulset.yaml b/znc/statefulset.yaml
index fed71a3..43f3eb1 100644
--- a/znc/statefulset.yaml
+++ b/znc/statefulset.yaml
@@ -6,6 +6,8 @@ metadata:
   name: znc
   annotations:
     polaris.fairwinds.com/runAsRootAllowed-exempt: "true" # linuxserver.io images don't support this, need to build my own
+    polaris.fairwinds.com/tagNotSpecified-exempt: "true" # allow latest tag for this app
+    polaris.fairwinds.com/topologySpreadConstraint-exempt: "true" # statefulset doesn't support multiple replicas
 spec:
   selector:
     matchLabels:
@@ -16,8 +18,10 @@ spec:
     metadata:
       labels:
         app.kubernetes.io/name: znc
+        app.kubernetes.io/instance: znc
     spec:
       priorityClassName: low-priority
+      automountServiceAccountToken: false
       containers:
       - name: znc
         image: lscr.io/linuxserver/znc:latest    
@@ -32,9 +36,10 @@ spec:
         resources:
           requests:
             memory: "256Mi"
-            cpu: "250m"
+            cpu: "100m"
           limits:
             memory: "512Mi"
+            cpu: "500m"
   volumeClaimTemplates:
   - metadata:
       name: config