diff --git a/src/server/auth.py b/src/server/auth.py
index cad205d..721d80a 100644
--- a/src/server/auth.py
+++ b/src/server/auth.py
@@ -56,4 +56,7 @@ class RateLimiter:
         return True
 
 
-rate_limiter = RateLimiter(max_requests=30, window_seconds=60)
+rate_limiter = RateLimiter(
+    max_requests=int(os.environ.get("RATE_LIMIT_MAX", "30")),
+    window_seconds=int(os.environ.get("RATE_LIMIT_WINDOW", "60")),
+)