diff --git a/.github/workflows/ci-main.yml b/.github/workflows/ci-main.yml
index 84e6f9f0c..1efe0f8f9 100644
--- a/.github/workflows/ci-main.yml
+++ b/.github/workflows/ci-main.yml
@@ -31,7 +31,7 @@ jobs:
           - pylint
           - pyright
           - ruff
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: Setup authentik env
@@ -39,7 +39,7 @@ jobs:
       - name: run job
         run: poetry run make ci-${{ matrix.job }}
   test-migrations:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: Setup authentik env
@@ -47,7 +47,7 @@ jobs:
       - name: run migrations
         run: poetry run python -m lifecycle.migrate
   test-migrations-from-stable:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     continue-on-error: true
     steps:
       - uses: actions/checkout@v3
@@ -82,7 +82,7 @@ jobs:
         run: poetry run python -m lifecycle.migrate
   test-unittest:
     name: test-unittest - PostgreSQL ${{ matrix.psql }}
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 30
     strategy:
       fail-fast: false
@@ -105,7 +105,7 @@ jobs:
         with:
           flags: unit
   test-integration:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 30
     steps:
       - uses: actions/checkout@v3
@@ -123,7 +123,7 @@ jobs:
           flags: integration
   test-e2e:
     name: test-e2e (${{ matrix.job.name }})
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 30
     strategy:
       fail-fast: false
@@ -178,12 +178,12 @@ jobs:
       - test-unittest
       - test-integration
       - test-e2e
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - run: echo mark
   build:
     needs: ci-core-mark
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 120
     steps:
       - uses: actions/checkout@v3
@@ -228,7 +228,7 @@ jobs:
           tag: gh-${{ steps.ev.outputs.branchNameContainer }}-${{ steps.ev.outputs.timestamp }}-${{ steps.ev.outputs.shortHash }}
   build-arm64:
     needs: ci-core-mark
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 120
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/ci-outpost.yml b/.github/workflows/ci-outpost.yml
index 84f523f92..bb1f54aaa 100644
--- a/.github/workflows/ci-outpost.yml
+++ b/.github/workflows/ci-outpost.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   lint-golint:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
@@ -33,7 +33,7 @@ jobs:
           args: --timeout 5000s --verbose
           skip-pkg-cache: true
   test-unittest:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
@@ -48,7 +48,7 @@ jobs:
     needs:
       - lint-golint
       - test-unittest
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - run: echo mark
   build-container:
@@ -62,7 +62,7 @@ jobs:
           - proxy
           - ldap
           - radius
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
         with:
@@ -103,7 +103,7 @@ jobs:
     timeout-minutes: 120
     needs:
       - ci-outpost-mark
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     strategy:
       fail-fast: false
       matrix:
diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml
index b6da95d2d..37519a43b 100644
--- a/.github/workflows/ci-web.yml
+++ b/.github/workflows/ci-web.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   lint-eslint:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -28,7 +28,7 @@ jobs:
         working-directory: web/
         run: npm run lint
   lint-build:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -44,7 +44,7 @@ jobs:
         working-directory: web/
         run: npm run tsc
   lint-prettier:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -60,7 +60,7 @@ jobs:
         working-directory: web/
         run: npm run prettier-check
   lint-lit-analyse:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -86,13 +86,13 @@ jobs:
       - lint-prettier
       - lint-lit-analyse
       - lint-build
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - run: echo mark
   build:
     needs:
       - ci-web-mark
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
diff --git a/.github/workflows/ci-website.yml b/.github/workflows/ci-website.yml
index 38885d83b..8aa182910 100644
--- a/.github/workflows/ci-website.yml
+++ b/.github/workflows/ci-website.yml
@@ -12,7 +12,7 @@ on:
 
 jobs:
   lint-prettier:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -26,7 +26,7 @@ jobs:
         working-directory: website/
         run: npm run prettier-check
   test:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-node@v3.8.1
@@ -40,7 +40,7 @@ jobs:
         working-directory: website/
         run: npm test
   build:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     name: ${{ matrix.job }}
     strategy:
       fail-fast: false
@@ -65,6 +65,6 @@ jobs:
       - lint-prettier
       - test
       - build
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - run: echo mark
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
index 71add7bde..fcfebd483 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -11,7 +11,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/gha-cache-cleanup.yml b/.github/workflows/gha-cache-cleanup.yml
index b2fa16407..4793071a6 100644
--- a/.github/workflows/gha-cache-cleanup.yml
+++ b/.github/workflows/gha-cache-cleanup.yml
@@ -8,7 +8,7 @@ on:
 
 jobs:
   cleanup:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - name: Check out code
         uses: actions/checkout@v3
diff --git a/.github/workflows/ghcr-retention.yml b/.github/workflows/ghcr-retention.yml
index b7dc6c447..f9a3e4ae8 100644
--- a/.github/workflows/ghcr-retention.yml
+++ b/.github/workflows/ghcr-retention.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   clean-ghcr:
     name: Delete old unused container images
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - id: generate_token
         uses: tibdex/github-app-token@v1
diff --git a/.github/workflows/image-compress.yml b/.github/workflows/image-compress.yml
index 48d93d639..c12239380 100644
--- a/.github/workflows/image-compress.yml
+++ b/.github/workflows/image-compress.yml
@@ -21,7 +21,7 @@ on:
 jobs:
   compress:
     name: compress
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     # Don't run on forks. Token will not be available. Will run on main and open a PR anyway
     if: |
       github.repository == 'goauthentik/authentik' &&
diff --git a/.github/workflows/publish-source-docs.yml b/.github/workflows/publish-source-docs.yml
index d6615a03f..722096c1f 100644
--- a/.github/workflows/publish-source-docs.yml
+++ b/.github/workflows/publish-source-docs.yml
@@ -12,7 +12,7 @@ env:
 
 jobs:
   publish-source-docs:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     timeout-minutes: 120
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/release-next-branch.yml b/.github/workflows/release-next-branch.yml
index 7a75a82a5..0cef5e4c0 100644
--- a/.github/workflows/release-next-branch.yml
+++ b/.github/workflows/release-next-branch.yml
@@ -10,7 +10,7 @@ permissions:
 
 jobs:
   update-next:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     environment: internal-production
     steps:
       - uses: actions/checkout@v3
diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
index 032380ee7..0d8a71608 100644
--- a/.github/workflows/release-publish.yml
+++ b/.github/workflows/release-publish.yml
@@ -6,7 +6,7 @@ on:
 
 jobs:
   build-server:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: Set up QEMU
@@ -46,7 +46,7 @@ jobs:
             VERSION=${{ steps.ev.outputs.version }}
             VERSION_FAMILY=${{ steps.ev.outputs.versionFamily }}
   build-outpost:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     strategy:
       fail-fast: false
       matrix:
@@ -95,7 +95,7 @@ jobs:
             VERSION_FAMILY=${{ steps.ev.outputs.versionFamily }}
   build-outpost-binary:
     timeout-minutes: 120
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     strategy:
       fail-fast: false
       matrix:
@@ -139,7 +139,7 @@ jobs:
       - build-server
       - build-outpost
       - build-outpost-binary
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: Run test suite in final docker images
@@ -155,7 +155,7 @@ jobs:
       - build-server
       - build-outpost
       - build-outpost-binary
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: prepare variables
diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml
index 7598c58f1..91652126b 100644
--- a/.github/workflows/release-tag.yml
+++ b/.github/workflows/release-tag.yml
@@ -8,7 +8,7 @@ on:
 jobs:
   build:
     name: Create Release from Tag
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - uses: actions/checkout@v3
       - name: Pre-release test
diff --git a/.github/workflows/repo-stale.yml b/.github/workflows/repo-stale.yml
index c52997a33..9955820c9 100644
--- a/.github/workflows/repo-stale.yml
+++ b/.github/workflows/repo-stale.yml
@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   stale:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - id: generate_token
         uses: tibdex/github-app-token@v1
diff --git a/.github/workflows/translation-advice.yml b/.github/workflows/translation-advice.yml
index f7a788fb6..cb0f15199 100644
--- a/.github/workflows/translation-advice.yml
+++ b/.github/workflows/translation-advice.yml
@@ -11,7 +11,7 @@ on:
 
 jobs:
   post-comment:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - name: Find Comment
         uses: peter-evans/find-comment@v2
diff --git a/.github/workflows/translation-compile.yml b/.github/workflows/translation-compile.yml
index 8fa655213..d1f9f95a1 100644
--- a/.github/workflows/translation-compile.yml
+++ b/.github/workflows/translation-compile.yml
@@ -13,7 +13,7 @@ env:
 
 jobs:
   compile:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - id: generate_token
         uses: tibdex/github-app-token@v1
diff --git a/.github/workflows/translation-rename.yml b/.github/workflows/translation-rename.yml
index 2de0382c7..c458a764a 100644
--- a/.github/workflows/translation-rename.yml
+++ b/.github/workflows/translation-rename.yml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   rename_pr:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     if: ${{ github.event.pull_request.user.login == 'transifex-integration[bot]'}}
     steps:
       - id: generate_token
diff --git a/.github/workflows/web-api-publish.yml b/.github/workflows/web-api-publish.yml
index 1f6ffbb4a..90e4d1c6e 100644
--- a/.github/workflows/web-api-publish.yml
+++ b/.github/workflows/web-api-publish.yml
@@ -7,7 +7,7 @@ on:
   workflow_dispatch:
 jobs:
   build:
-    runs-on: ubuntu-latest
+    runs-on: large-4core-ubuntu-22.04
     steps:
       - id: generate_token
         uses: tibdex/github-app-token@v1