diff --git a/n8n/rbac-restarter.yaml b/n8n/rbac-restarter.yaml
index bf64982..5653cc7 100644
--- a/n8n/rbac-restarter.yaml
+++ b/n8n/rbac-restarter.yaml
@@ -128,6 +128,37 @@ subjects:
     name: n8n-restarter
     namespace: n8n
 ---
+# Los dos blogs (2026-07-30). Son lo unico de aqui que da la cara al publico, y
+# justo lo que peor se lleva con quince dias sin nadie mirando: si Ghost se
+# atasca, que al menos se intente un reinicio antes de que llegue el aviso.
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: n8n-restarter
+  namespace: ghost-en
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: n8n-restarter
+subjects:
+  - kind: ServiceAccount
+    name: n8n-restarter
+    namespace: n8n
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: n8n-restarter
+  namespace: zona-exclusion
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: n8n-restarter
+subjects:
+  - kind: ServiceAccount
+    name: n8n-restarter
+    namespace: n8n
+---
 # argocd el ultimo a proposito: reiniciar argocd-server o argocd-repo-server
 # es lo mas agresivo del mapa (deja el cluster sin reconciliar un rato).
 apiVersion: rbac.authorization.k8s.io/v1