diff --git a/infrastructure/vault/sarex-contour/vault.yaml b/infrastructure/vault/sarex-contour/vault.yaml
index 42eadbc..d37772e 100644
--- a/infrastructure/vault/sarex-contour/vault.yaml
+++ b/infrastructure/vault/sarex-contour/vault.yaml
@@ -6,16 +6,39 @@ metadata:
 spec:
   interval: 5m
   timeout: 10m
+  postRenderers:
+    # chart 0.2.3 прибивает server-под к нодам dedicated=sts; в sarex-contour
+    # таких нод нет — снимаем nodeSelector/tolerations со StatefulSet.
+    - kustomize:
+        patches:
+          - target:
+              group: apps
+              version: v1
+              kind: StatefulSet
+              namespace: vault
+              name: vault-vault-contour
+            patch: |-
+              - op: replace
+                path: /spec/template/spec/nodeSelector
+                value: {}
+              - op: replace
+                path: /spec/template/spec/tolerations
+                value: []
   values:
     imagePullSecrets:
       - name: regcred
     backup:
       enabled: false
+    injector:
+      nodeSelector: {}
+      tolerations: []
     server:
       standalone:
         enabled: true
       ha:
         enabled: false
+      nodeSelector: {}
+      tolerations: []
       dataStorage:
         enabled: true
         size: 10Gi