diff --git a/services/maintenance/soteria-configmap.yaml b/services/maintenance/soteria-configmap.yaml
index 18cad423b..a2b80a693 100644
--- a/services/maintenance/soteria-configmap.yaml
+++ b/services/maintenance/soteria-configmap.yaml
@@ -17,6 +17,8 @@ data:
   SOTERIA_ALLOWED_GROUPS: admin,maintenance
   SOTERIA_BACKUP_MAX_AGE_HOURS: "24"
   SOTERIA_METRICS_REFRESH_SECONDS: "300"
+  SOTERIA_POLICY_EVAL_SECONDS: "1800"
+  SOTERIA_POLICY_BACKUPS_PER_CYCLE: "1"
   SOTERIA_B2_ENABLED: "true"
   SOTERIA_B2_SECRET_NAMESPACE: maintenance
   SOTERIA_B2_SECRET_NAME: soteria-restic
diff --git a/services/maintenance/soteria-deployment.yaml b/services/maintenance/soteria-deployment.yaml
index 57ad65643..c40f60c5a 100644
--- a/services/maintenance/soteria-deployment.yaml
+++ b/services/maintenance/soteria-deployment.yaml
@@ -7,7 +7,7 @@ metadata:
   labels:
     app: soteria
 spec:
-  replicas: 0
+  replicas: 1
   revisionHistoryLimit: 3
   selector:
     matchLabels:
@@ -17,7 +17,7 @@ spec:
       labels:
         app: soteria
       annotations:
-        soteria.bstein.dev/config-revision: "2026-04-13-restic-v1"
+        soteria.bstein.dev/config-revision: "2026-07-14-bounded-restart"
     spec:
       serviceAccountName: soteria
       nodeSelector: