diff --git a/zona-exclusion/deployment.yaml b/zona-exclusion/deployment.yaml
index f2b8b3c..b92c1dc 100644
--- a/zona-exclusion/deployment.yaml
+++ b/zona-exclusion/deployment.yaml
@@ -30,6 +30,10 @@ metadata:
     app: zona-exclusion
 spec:
   replicas: 1
+  # Single-replica Ghost on a RWO local-path SQLite DB: Recreate avoids two Ghost
+  # processes briefly sharing one ghost.db during a roll (RollingUpdate corruption risk).
+  strategy:
+    type: Recreate
   selector:
     matchLabels:
       app: zona-exclusion
@@ -56,12 +60,12 @@ spec:
             - name: mail__options__auth__user
               valueFrom:
                 secretKeyRef:
-                  name: zona-exclusion-secrets
+                  name: zona-exclusion-secrets-infisical
                   key: smtp-user
             - name: mail__options__auth__pass
               valueFrom:
                 secretKeyRef:
-                  name: zona-exclusion-secrets
+                  name: zona-exclusion-secrets-infisical
                   key: smtp-pass
             - name: mail__from
               value: "Zona de Exclusión <chemavx@gmail.com>"