Changed
- Guarded against oversized API requests. Aerodrome now rejects an unreasonably large request body (over 2 MB) with a "request too large" response instead of trying to read it all into memory — so a single bad or malicious request can't exhaust RAM and knock the service into a restart loop, which mattered most on small boxes like a Raspberry Pi. File uploads (config import, backup restore, local update) are unaffected and keep their own, larger limits.