diff --git a/templates/paperless-ngx/.felhom.yml b/templates/paperless-ngx/.felhom.yml
index 7f7cae6..d37f171 100644
--- a/templates/paperless-ngx/.felhom.yml
+++ b/templates/paperless-ngx/.felhom.yml
@@ -28,6 +28,7 @@ slug: "paperless-ngx"
 # --- Resource hints (displayed on deploy screen) ---
 resources:
   ram: "~500MB"
+  mem_limit: "1152M"                   # Total enforced limit across all containers (768+256+128)
   pi_compatible: true                  # Runs on Raspberry Pi 3B+
   needs_hdd: true                      # Needs external storage for user data
 
diff --git a/templates/paperless-ngx/docker-compose.yml b/templates/paperless-ngx/docker-compose.yml
index ed48b8e..24a30dd 100644
--- a/templates/paperless-ngx/docker-compose.yml
+++ b/templates/paperless-ngx/docker-compose.yml
@@ -59,6 +59,10 @@ services:
     networks:
       - traefik-public
       - paperless-internal
+    deploy:
+      resources:
+        limits:
+          memory: 768M
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8000"]
       interval: 30s
@@ -85,6 +89,10 @@ services:
       - paperless_postgres_data:/var/lib/postgresql/data
     networks:
       - paperless-internal
+    deploy:
+      resources:
+        limits:
+          memory: 256M
     healthcheck:
       test: ["CMD-SHELL", "pg_isready -U paperless -d paperless"]
       interval: 10s
@@ -101,6 +109,10 @@ services:
       - paperless_redis_data:/data
     networks:
       - paperless-internal
+    deploy:
+      resources:
+        limits:
+          memory: 128M
     healthcheck:
       test: ["CMD", "redis-cli", "ping"]
       interval: 10s