v0.0.3

src/routes/mod.rs

@@ -182,6 +182,8 @@ pub fn create_router(
         .merge(protected_auth);
 
     // Protected data routes (auth_guard + CSRF).
+    // Multipart framing needs a small allowance on top of the configured per-file limit.
+    let attachment_body_limit = config.max_attachment_size_bytes().saturating_add(1024 * 1024);
     let protected_data = Router::new()
         .route(
             "/folders",
@@ -238,7 +240,7 @@ pub fn create_router(
         )
         .route(
             "/drafts/{draft_id}/attachments",
-            post(attachments::upload_attachment).layer(DefaultBodyLimit::max(30 * 1024 * 1024)),
+            post(attachments::upload_attachment).layer(DefaultBodyLimit::max(attachment_body_limit)),
         )
         .route(
             "/drafts/{draft_id}/attachments/{attachment_id}",