diff --git a/stacks/traefik/modules/traefik/error-pages.tf b/stacks/traefik/modules/traefik/error-pages.tf
index 34c1e997..4913bc99 100644
--- a/stacks/traefik/modules/traefik/error-pages.tf
+++ b/stacks/traefik/modules/traefik/error-pages.tf
@@ -57,6 +57,19 @@ resource "kubernetes_deployment" "error_pages" {
             value = "shuffle"
           }
 
+          env {
+            # fasthttp's per-connection read buffer ALSO caps total request
+            # header size (default 5120 bytes). Authentik forward-auth sets
+            # one authentik_proxy_* cookie per protected service, all scoped
+            # to .viktorbarzin.me — 30+ services puts the aggregate Cookie
+            # header way past 5KB, so every error-middleware dispatch here
+            # answered 431 "Too big request header" instead of the styled
+            # error page (same cookie-bloat class as the 2026-06-01 openresty
+            # buffer fixes on bot-block-proxy/auth-proxy).
+            name  = "READ_BUFFER_SIZE"
+            value = "131072"
+          }
+
           liveness_probe {
             http_get {
               path = "/healthz"