diff --git a/tailscale-proxy/docker-compose.yaml b/tailscale-proxy/docker-compose.yaml
index 293c7da..18f2ae1 100644
--- a/tailscale-proxy/docker-compose.yaml
+++ b/tailscale-proxy/docker-compose.yaml
@@ -22,6 +22,12 @@ services:
     image: ghcr.io/3proxy/3proxy:latest
     container_name: ts-lan-proxy
     restart: unless-stopped
+    # Same Docker default-1024 trap that took Telemt down on 2026-09-09; 3proxy
+    # does not raise its own soft limit either. Steady state is ~22 descriptors.
+    ulimits:
+      nofile:
+        soft: 65536
+        hard: 524288
     depends_on: [ts-proxy]
     volumes:
       - "/mnt/containers/tailscale-proxy/3proxy.cfg:/etc/3proxy/3proxy.cfg:ro,z"