diff --git a/deploy/app/service.yaml b/deploy/app/service.yaml
index bcf7c4d..736ccfd 100644
--- a/deploy/app/service.yaml
+++ b/deploy/app/service.yaml
@@ -24,8 +24,10 @@ spec:
   selector:
     app: lyrionmusicserver
   type: LoadBalancer
+  loadBalancerNodeSelector:
+    role: worker-node # restrict klipper-lb pod to worker-node, trying to reduce control-plane memory usage
   ports:
-   #! SlimProto clients require both control and stream ports.
+    #! SlimProto clients require both control and stream ports.
     # - TCP/UDP 3483: control channel (registration, handshake, status).
     # - TCP 9000: audio stream channel for local library playback.
     # If 9000 is blocked, internet radio may still work (clients connect directly to external servers),