diff --git a/argocd/manifests/paperless-ringtail/deployment.yaml b/argocd/manifests/paperless-ringtail/deployment.yaml
index 1f283c9..c7fc555 100644
--- a/argocd/manifests/paperless-ringtail/deployment.yaml
+++ b/argocd/manifests/paperless-ringtail/deployment.yaml
@@ -33,6 +33,20 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       initContainers:
+        # redis as a native sidecar (restartPolicy: Always): starts before
+        # the migrate init and stays running for the app containers, so all
+        # of them reach PAPERLESS_REDIS=localhost:6379.
+        - name: redis
+          image: docker.io/library/redis:kustomized
+          restartPolicy: Always
+          ports:
+            - containerPort: 6379
+          resources:
+            requests:
+              memory: "32Mi"
+              cpu: "10m"
+            limits:
+              memory: "128Mi"
         - name: migrate
           image: registry.ops.eblu.me/blumeops/paperless:kustomized
           command: ["paperless-ngx", "migrate", "--no-input"]
@@ -171,17 +185,6 @@ spec:
             limits:
               memory: "512Mi"
 
-        - name: redis
-          image: docker.io/library/redis:kustomized
-          ports:
-            - containerPort: 6379
-          resources:
-            requests:
-              memory: "32Mi"
-              cpu: "10m"
-            limits:
-              memory: "128Mi"
-
       volumes:
         - name: data
           emptyDir: {}