diff --git a/infrastructure/vault-injector/helmrelease.yaml b/infrastructure/vault-injector/helmrelease.yaml
index 9e9c45a1..70f5f0bb 100644
--- a/infrastructure/vault-injector/helmrelease.yaml
+++ b/infrastructure/vault-injector/helmrelease.yaml
@@ -43,6 +43,11 @@ spec:
         node-role.kubernetes.io/worker: "true"
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/bstein-dev-home/frontend-deployment.yaml b/services/bstein-dev-home/frontend-deployment.yaml
index 92720754..c87ca83e 100644
--- a/services/bstein-dev-home/frontend-deployment.yaml
+++ b/services/bstein-dev-home/frontend-deployment.yaml
@@ -18,6 +18,13 @@ spec:
       nodeSelector:
         kubernetes.io/arch: arm64
         node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
       imagePullSecrets:
         - name: harbor-regcred
       containers:
diff --git a/services/finance/firefly-deployment.yaml b/services/finance/firefly-deployment.yaml
index 9c684fe7..d55ed4ec 100644
--- a/services/finance/firefly-deployment.yaml
+++ b/services/finance/firefly-deployment.yaml
@@ -64,6 +64,11 @@ spec:
         node-role.kubernetes.io/worker: "true"
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/game-stream/oauth2-proxy-wolf.yaml b/services/game-stream/oauth2-proxy-wolf.yaml
index f3c0e46a..2cef1f1a 100644
--- a/services/game-stream/oauth2-proxy-wolf.yaml
+++ b/services/game-stream/oauth2-proxy-wolf.yaml
@@ -53,6 +53,8 @@ spec:
                   - key: kubernetes.io/arch
                     operator: In
                     values: ["amd64","arm64"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/health/wger-deployment.yaml b/services/health/wger-deployment.yaml
index 56a29a4e..46d0484c 100644
--- a/services/health/wger-deployment.yaml
+++ b/services/health/wger-deployment.yaml
@@ -53,6 +53,11 @@ spec:
     spec:
       affinity:
         nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/mailu/helmrelease.yaml b/services/mailu/helmrelease.yaml
index c503c34e..59d9bec8 100644
--- a/services/mailu/helmrelease.yaml
+++ b/services/mailu/helmrelease.yaml
@@ -351,6 +351,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -427,7 +435,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -499,6 +507,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -568,6 +584,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -637,6 +661,14 @@ spec:
                         {{- end }}
                         {{ end }}
                   spec:
+                    affinity:
+                      nodeAffinity:
+                        requiredDuringSchedulingIgnoredDuringExecution:
+                          nodeSelectorTerms:
+                            - matchExpressions:
+                                - key: kubernetes.io/hostname
+                                  operator: NotIn
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -713,7 +745,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                     serviceAccountName: mailu-vault-sync
                     automountServiceAccountToken: true
                     containers:
@@ -787,7 +819,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
           - target:
               kind: Deployment
               name: mailu-tika
@@ -806,7 +838,7 @@ spec:
                             - matchExpressions:
                                 - key: kubernetes.io/hostname
                                   operator: NotIn
-                                  values: ["titan-14"]
+                                  values: ["titan-13", "titan-15", "titan-17", "titan-19"]
                         preferredDuringSchedulingIgnoredDuringExecution:
                           - weight: 100
                             preference:
diff --git a/services/maintenance/vault-sync-deployment.yaml b/services/maintenance/vault-sync-deployment.yaml
index 7c974b34..d0c07552 100644
--- a/services/maintenance/vault-sync-deployment.yaml
+++ b/services/maintenance/vault-sync-deployment.yaml
@@ -18,6 +18,13 @@ spec:
     spec:
       nodeSelector:
         node-role.kubernetes.io/worker: "true"
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+              - matchExpressions:
+                  - key: longhorn-host
+                    operator: DoesNotExist
       serviceAccountName: maintenance-vault-sync
       containers:
         - name: sync
diff --git a/services/openclaw/oauth2-proxy-agent.yaml b/services/openclaw/oauth2-proxy-agent.yaml
index e43dd4f7..43352373 100644
--- a/services/openclaw/oauth2-proxy-agent.yaml
+++ b/services/openclaw/oauth2-proxy-agent.yaml
@@ -54,6 +54,8 @@ spec:
                   - key: kubernetes.io/arch
                     operator: In
                     values: ["arm64"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/outline/deployment.yaml b/services/outline/deployment.yaml
index a7b469b9..0ba1c4a0 100644
--- a/services/outline/deployment.yaml
+++ b/services/outline/deployment.yaml
@@ -88,6 +88,8 @@ spec:
                   - key: hardware
                     operator: In
                     values: ["rpi4", "rpi5"]
+                  - key: longhorn-host
+                    operator: DoesNotExist
       containers:
         - name: outline
           image: outlinewiki/outline:1.2.0
diff --git a/services/quality/oauth2-proxy-sonarqube.yaml b/services/quality/oauth2-proxy-sonarqube.yaml
index 12e971b4..6e997d62 100644
--- a/services/quality/oauth2-proxy-sonarqube.yaml
+++ b/services/quality/oauth2-proxy-sonarqube.yaml
@@ -61,6 +61,8 @@ spec:
                     operator: DoesNotExist
                   - key: node-role.kubernetes.io/master
                     operator: DoesNotExist
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference:
diff --git a/services/quality/sonarqube-deployment.yaml b/services/quality/sonarqube-deployment.yaml
index 9637c7bd..27382ea2 100644
--- a/services/quality/sonarqube-deployment.yaml
+++ b/services/quality/sonarqube-deployment.yaml
@@ -49,6 +49,8 @@ spec:
                     operator: DoesNotExist
                   - key: node-role.kubernetes.io/master
                     operator: DoesNotExist
+                  - key: longhorn-host
+                    operator: DoesNotExist
           preferredDuringSchedulingIgnoredDuringExecution:
             - weight: 100
               preference: