diff --git a/docs/forgejo-on-railiance01.md b/docs/forgejo-on-railiance01.md
index d5750b4..8be4c1f 100644
--- a/docs/forgejo-on-railiance01.md
+++ b/docs/forgejo-on-railiance01.md
@@ -60,6 +60,14 @@ make forgejo-status
 make forgejo-smoke
 ```
 
+## Upgrade notes
+
+- Pin `FORGEJO_CHART_VERSION=12.5.0` — chart 12.6+ requires Gitea 1.26 `config edit-ini`.
+- `strategy.type: Recreate` in `helm/forgejo-values.yaml` — avoids leveldb queue lock
+  on the shared RWO PVC during rolling updates.
+- Actions enabled via `gitea.config.actions.ENABLED: true`.
+- Ingress backend service name is `forgejo-gitea-http` (Helm release naming).
+
 ## Day-2 operator targets
 
 ```bash
diff --git a/helm/forgejo-values.yaml b/helm/forgejo-values.yaml
index a49b08d..0d40017 100644
--- a/helm/forgejo-values.yaml
+++ b/helm/forgejo-values.yaml
@@ -1,5 +1,9 @@
 # Non-secret Forgejo Helm values (gitea-charts/gitea chart + Forgejo image).
 # Layer helm/forgejo-secrets.sops.yaml for database password and admin credentials.
+# Recreate avoids leveldb queue lock fights on the shared RWO PVC during upgrades.
+strategy:
+  type: Recreate
+
 service:
   http:
     type: ClusterIP
@@ -44,4 +48,6 @@ gitea:
       SSH_LISTEN_PORT: 2222
       DISABLE_SSH: false
     service:
-      DISABLE_REGISTRATION: true
\ No newline at end of file
+      DISABLE_REGISTRATION: true
+    actions:
+      ENABLED: true
\ No newline at end of file