diff --git a/ansible/roles/postgresql/tasks/main.yml b/ansible/roles/postgresql/tasks/main.yml
index 5732b39..f2e7630 100644
--- a/ansible/roles/postgresql/tasks/main.yml
+++ b/ansible/roles/postgresql/tasks/main.yml
@@ -139,5 +139,19 @@
   loop: "{{ postgresql_users }}"
   no_log: true
 
+# PostgreSQL 15+ révoque CREATE ON SCHEMA public par défaut
+- name: Grant schema public to users (PostgreSQL 15+)
+  community.postgresql.postgresql_privs:
+    database: "{{ item.db }}"
+    privs: ALL
+    type: schema
+    objs: public
+    role: "{{ item.name }}"
+    state: present
+  become: true
+  become_user: postgres
+  loop: "{{ postgresql_users }}"
+  no_log: true
+
 # Firewall géré centralement par le rôle gateway (nftables)
 # Port 5432 ouvert pour cluster_network dans nftables.conf.j2
diff --git a/k8s/apps/open-webui/deployment.yaml b/k8s/apps/open-webui/deployment.yaml
index 28458e6..47c48c6 100644
--- a/k8s/apps/open-webui/deployment.yaml
+++ b/k8s/apps/open-webui/deployment.yaml
@@ -55,10 +55,10 @@ spec:
           resources:
             requests:
               cpu: 200m
-              memory: 256Mi
+              memory: 512Mi
             limits:
               cpu: 1000m
-              memory: 1Gi
+              memory: 2Gi
           readinessProbe:
             httpGet:
               path: /health