diff --git a/docker-compose.yml b/docker-compose.yml
index 388cc1da..2618d540 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -169,6 +169,12 @@ services:
       - "traefik.http.routers.rspace-rsocials.entrypoints=web"
       - "traefik.http.routers.rspace-rsocials.priority=120"
       - "traefik.http.routers.rspace-rsocials.service=rspace-online"
+      # Rate limiting middleware (coarse edge defense — token bucket per source)
+      - "traefik.http.middlewares.rspace-ratelimit.ratelimit.average=120"
+      - "traefik.http.middlewares.rspace-ratelimit.ratelimit.burst=30"
+      - "traefik.http.middlewares.rspace-ratelimit.ratelimit.period=1m"
+      - "traefik.http.routers.rspace-main.middlewares=rspace-ratelimit"
+      - "traefik.http.routers.rspace-canvas.middlewares=rspace-ratelimit"
       # Service configuration
       - "traefik.http.services.rspace-online.loadbalancer.server.port=3000"
       - "traefik.docker.network=traefik-public"