diff --git a/README.md b/README.md
index 87c4290..894e6b7 100644
--- a/README.md
+++ b/README.md
@@ -449,6 +449,9 @@ The `heimdall` app is intentionally waited on at the end of `./lab.sh apps`.
 It runs the LinuxServer.io Heimdall dashboard, persists `/config` on
 OpenEBS, and seeds tiles for the website, demo apps, Gitea, Grafana,
 Prometheus, Alertmanager, Argo CD, the local registry, and Heimdall itself.
+Its manifest only selects Linux nodes; the bound OpenEBS local PV supplies the
+node affinity. Do not also pin it to a workload class unless the retained PV is
+rebuilt on a node with that label.
 Because Heimdall does not support reverse-proxy subfolder hosting cleanly, it
 is exposed through the dedicated hostname `heimdall.lab2025.duckdns.org` rather
 than a `/heimdall/` path.
diff --git a/apps/heimdall/web-app.yaml b/apps/heimdall/web-app.yaml
index b8f0e4a..3cbdf59 100644
--- a/apps/heimdall/web-app.yaml
+++ b/apps/heimdall/web-app.yaml
@@ -269,7 +269,6 @@ spec:
     spec:
       nodeSelector:
         kubernetes.io/os: linux
-        homelab.dev/workload-class: platform
       securityContext:
         fsGroup: 1000
         fsGroupChangePolicy: OnRootMismatch