diff --git a/compose.yaml b/compose.yaml
index bddc0215..c3b95a42 100644
--- a/compose.yaml
+++ b/compose.yaml
@@ -4,7 +4,7 @@ services:
     image: ghcr.io/nextcloud-releases/all-in-one:latest # This is the container image used. You can switch to ghcr.io/nextcloud-releases/all-in-one:beta if you want to help testing new releases. See https://github.com/nextcloud/all-in-one#how-to-switch-the-channel
     init: true # This setting makes sure that signals from main process inside the container are correctly forwarded to children. See https://docs.docker.com/reference/compose-file/services/#init
     restart: always # This makes sure that the container starts always together with the host OS. See https://docs.docker.com/reference/compose-file/services/#restart
-    cpu_shares: 4096 # This gives the mastercontainer four times the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers. See https://docs.docker.com/reference/compose-file/services/#cpu_shares
+    cpu_shares: 2048 # This gives the mastercontainer twice the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers. See https://docs.docker.com/reference/compose-file/services/#cpu_shares
     container_name: nextcloud-aio-mastercontainer # This line is not allowed to be changed as otherwise AIO will not work correctly
     volumes:
       - nextcloud_aio_mastercontainer:/mnt/docker-aio-config # This line is not allowed to be changed as otherwise the built-in backup solution will not work
diff --git a/multiple-instances.md b/multiple-instances.md
index 8a17c2ad..52509037 100644
--- a/multiple-instances.md
+++ b/multiple-instances.md
@@ -144,7 +144,7 @@ apt install --no-install-recommends qemu-system qemu-utils libvirt-clients libvi
    --name nextcloud-aio-mastercontainer \
    --restart always \
    --publish 8080:8080 \
-   --cpu-shares 4096 \
+   --cpu-shares 2048 \
    --env APACHE_PORT=11000 \
    --env APACHE_IP_BINDING=0.0.0.0 \
    --env TALK_PORT=3478 \
diff --git a/php/containers.json b/php/containers.json
index 0114bacf..53c578a6 100644
--- a/php/containers.json
+++ b/php/containers.json
@@ -82,7 +82,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-database",
@@ -140,7 +140,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-nextcloud",
@@ -283,7 +283,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-notify-push",
@@ -325,7 +325,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-redis",
@@ -368,7 +368,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-collabora",
@@ -615,7 +615,7 @@
         "/tmp",
         "/nextcloud_aio_volumes"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-watchtower",
@@ -639,7 +639,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-domaincheck",
@@ -885,7 +885,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-harp",
@@ -927,7 +927,7 @@
       "cap_drop": [
         "NET_RAW"
       ],
-      "cpu_shares": 2048
+      "cpu_shares": 1024
     },
     {
       "container_name": "nextcloud-aio-whiteboard",
diff --git a/php/src/ContainerDefinitionFetcher.php b/php/src/ContainerDefinitionFetcher.php
index c5d9bf94..acc31526 100644
--- a/php/src/ContainerDefinitionFetcher.php
+++ b/php/src/ContainerDefinitionFetcher.php
@@ -303,7 +303,7 @@ readonly class ContainerDefinitionFetcher {
                 $shmSize = $entry['shm_size'];
             }
 
-            $cpuShares = 1024;
+            $cpuShares = 512;
             if (isset($entry['cpu_shares'])) {
                 $cpuShares = $entry['cpu_shares'];
             }
diff --git a/readme.md b/readme.md
index 8df0e36c..d092a296 100644
--- a/readme.md
+++ b/readme.md
@@ -202,7 +202,7 @@ sudo docker run \
   --publish 80:80 \
   --publish 8080:8080 \
   --publish 8443:8443 \
-  --cpu-shares 4096 \
+  --cpu-shares 2048 \
   --volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config \
   --volume /var/run/docker.sock:/var/run/docker.sock:ro \
   ghcr.io/nextcloud-releases/all-in-one:latest
@@ -219,7 +219,7 @@ sudo docker run \
   - `--publish 80:80` — publishes container port 80 on host port 80 (used for ACME http-challenge when obtaining certificates, used for for the AIO-interface running inside the mastercontainer). Not required if you run AIO behind a reverse proxy.
   - `--publish 8080:8080` — publishes the AIO interface (self-signed certificate) on host port 8080. You may map a different host port if 8080 is in use (e.g. `--publish 8081:8080`).  
   - `--publish 8443:8443` — publishes the AIO interface with a valid certificate on host port 8443 (requires ports 80 and 8443 to be reachable and a domain pointing to your server). Not required if you run AIO behind a reverse proxy.  
-  - `--cpu-shares 4096` — gives the mastercontainer four times the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers.  
+  - `--cpu-shares 2048` — gives the mastercontainer twice the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers.  
   - `--volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config` — stores mastercontainer configuration in the named Docker volume. Do not change this volume name; built-in backups depend on it.  
   - `--volume /var/run/docker.sock:/var/run/docker.sock:ro` — mounts the Docker socket (read-only) so the mastercontainer can manage other containers. On Windows/macOS or when using rootless Docker, this path may need adjustment; see the platform-specific docs. If you change the socket path, also set `WATCHTOWER_DOCKER_SOCKET_PATH` accordingly. If you prefer not to expose the socket, see the manual-install documentation: [Manual install without docker socket access](https://github.com/nextcloud/all-in-one/tree/main/manual-install)  
   - `ghcr.io/nextcloud-releases/all-in-one:latest` — the mastercontainer image.
@@ -705,7 +705,7 @@ docker run ^
 --publish 80:80 ^
 --publish 8080:8080 ^
 --publish 8443:8443 ^
---cpu-shares 4096 ^
+--cpu-shares 2048 ^
 --volume nextcloud_aio_mastercontainer:/mnt/docker-aio-config ^
 --volume //var/run/docker.sock:/var/run/docker.sock:ro ^
 ghcr.io/nextcloud-releases/all-in-one:latest
diff --git a/reverse-proxy.md b/reverse-proxy.md
index c0df44a2..25d86325 100644
--- a/reverse-proxy.md
+++ b/reverse-proxy.md
@@ -1105,7 +1105,7 @@ sudo docker run \
 --name nextcloud-aio-mastercontainer \
 --restart always \
 --publish 8080:8080 \
---cpu-shares 4096 \
+--cpu-shares 2048 \
 --env APACHE_PORT=11000 \
 --env APACHE_IP_BINDING=0.0.0.0 \
 --env APACHE_ADDITIONAL_NETWORK="" \
@@ -1125,7 +1125,7 @@ ghcr.io/nextcloud-releases/all-in-one:latest
 - `--name nextcloud-aio-mastercontainer` This is the name of the container. This line is not allowed to be changed, since mastercontainer updates would fail.
 - `--restart always` This is the "restart policy". `always` means that the container should always get started with the Docker daemon. See the Docker documentation for further detail about restart policies: https://docs.docker.com/config/containers/start-containers-automatically/
 - `--publish 8080:8080` This means that port 8080 of the container should get published on the host using port 8080. This port is used for the AIO interface and uses a self-signed certificate by default. You can also use a different host port if port 8080 is already used on your host, for example `--publish 8081:8080` (only the first port can be changed for the host, the second port is for the container and must remain at 8080).
-- `--cpu-shares 4096` This gives the mastercontainer four times the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers.
+- `--cpu-shares 2048` This gives the mastercontainer twice the default CPU share weighting (default is 1024), ensuring it stays responsive under heavy load from sibling containers.
 - `--env APACHE_PORT=11000` This is the port that is published on the host that runs Docker and Nextcloud AIO at which the reverse proxy should point at.
 - `--env APACHE_IP_BINDING=0.0.0.0` This can be modified to allow access to the published port on the host only from certain ip-addresses. [See this documentation](#3-limit-the-access-to-the-apache-container)
 - `--env APACHE_ADDITIONAL_NETWORK=""` This can be used to put the sibling apache container that is created by AIO into a specified network - useful if your reverse proxy runs as a container on the same host. [See this documentation](#adapting-the-sample-web-server-configurations-below)
@@ -1156,7 +1156,7 @@ docker run ^
 --name nextcloud-aio-mastercontainer ^
 --restart always ^
 --publish 8080:8080 ^
---cpu-shares 4096 ^
+--cpu-shares 2048 ^
 --env APACHE_PORT=11000 ^
 --env APACHE_IP_BINDING=0.0.0.0 ^
 --env APACHE_ADDITIONAL_NETWORK="" ^