diff --git a/argocd/manifests/authentik/deployment-worker.yaml b/argocd/manifests/authentik/deployment-worker.yaml
index 3d4fb0c..ed8a753 100644
--- a/argocd/manifests/authentik/deployment-worker.yaml
+++ b/argocd/manifests/authentik/deployment-worker.yaml
@@ -53,6 +53,8 @@ spec:
                   key: postgresql-password
             - name: AUTHENTIK_REDIS__HOST
               value: authentik-redis
+            - name: AUTHENTIK_WORKER_CONCURRENCY
+              value: "2"
             - name: AUTHENTIK_GRAFANA_CLIENT_SECRET
               valueFrom:
                 secretKeyRef:
diff --git a/docs/changelog.d/+authentik-worker-concurrency.bugfix.md b/docs/changelog.d/+authentik-worker-concurrency.bugfix.md
new file mode 100644
index 0000000..f438361
--- /dev/null
+++ b/docs/changelog.d/+authentik-worker-concurrency.bugfix.md
@@ -0,0 +1 @@
+Fix authentik worker OOMKill by setting AUTHENTIK_WORKER_CONCURRENCY=2 (was defaulting to 16 based on CPU count).