diff --git a/docker-compose.yml b/docker-compose.yml
index c946e2f..9fac8a2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -17,6 +17,12 @@ services:
       - /root/zombies:/root/zombies:rw
       - /root/zombies/.electric-cherry:/data:rw
     environment:
+      # SvelteKit's Node adapter caps request bodies at 512KB by default,
+      # which rejects real-world plugin .dll uploads with HTTP 413. Same
+      # trust boundary as the CSRF disable (see svelte.config.js) — this is
+      # LAN-only, so 0 = unlimited is fine. If exposed to the public
+      # internet, replace with a concrete byte cap instead.
+      BODY_SIZE_LIMIT: "0"
       SERVERS_ROOT: /root/zombies/t5
       REL_DEST: runtime/plutonium/storage/t5/raw/scripts/sp
       BETA_ARCHIVE_DIR: /root/zombies/beta-archive