diff --git a/charts/symcrest-web/templates/deployment.yaml b/charts/symcrest-web/templates/deployment.yaml
index ea07e2c..3e21f9b 100644
--- a/charts/symcrest-web/templates/deployment.yaml
+++ b/charts/symcrest-web/templates/deployment.yaml
@@ -16,6 +16,13 @@ spec:
     spec:
       imagePullSecrets:
         - name: forgejo-registry
+
+      nodeSelector:
+{{ toYaml .Values.nodeSelector | indent 8 }}
+
+      topologySpreadConstraints:
+{{ toYaml .Values.topologySpreadConstraints | indent 8 }}
+
       containers:
         - name: symcrest-web
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
diff --git a/charts/symcrest-web/values.yaml b/charts/symcrest-web/values.yaml
index 210f08c..d5ea1d6 100644
--- a/charts/symcrest-web/values.yaml
+++ b/charts/symcrest-web/values.yaml
@@ -26,3 +26,14 @@ resources:
   limits:
     cpu: 250m
     memory: 256Mi
+
+nodeSelector:
+  workload: app
+
+topologySpreadConstraints:
+  - maxSkew: 1
+    topologyKey: topology.kubernetes.io/zone
+    whenUnsatisfiable: DoNotSchedule
+    labelSelector:
+      matchLabels:
+        app: symcrest-web
diff --git a/rendered/symcrest-web/symcrest-web.yaml b/rendered/symcrest-web/symcrest-web.yaml
index d9cadd6..7951f88 100644
--- a/rendered/symcrest-web/symcrest-web.yaml
+++ b/rendered/symcrest-web/symcrest-web.yaml
@@ -33,6 +33,18 @@ spec:
     spec:
       imagePullSecrets:
         - name: forgejo-registry
+
+      nodeSelector:
+        workload: app
+
+      topologySpreadConstraints:
+        - labelSelector:
+            matchLabels:
+              app: symcrest-web
+          maxSkew: 1
+          topologyKey: topology.kubernetes.io/zone
+          whenUnsatisfiable: DoNotSchedule
+
       containers:
         - name: symcrest-web
           image: "www.symcrest.com/symcrest/symcrest-web:1.0.7"