diff --git a/.github/api-rate-limiting.conf b/.github/api-rate-limiting.conf
new file mode 100644
index 0000000..bf1d56d
--- /dev/null
+++ b/.github/api-rate-limiting.conf
@@ -0,0 +1,15 @@
+# ⚡ API Rate Limiting Configuration
+upstream api_backend {
+    server 127.0.0.1:8080;
+    keepalive 32;
+}
+
+limit_req_zone $binary_remote_addr zone=api:10m rate=10r/s;
+limit_req_zone $binary_remote_addr zone=auth:10m rate=5r/m;
+
+server {
+    location /api/ {
+        limit_req zone=api burst=20 nodelay;
+        proxy_pass http://api_backend;
+    }
+}