--- a/modules/signingserver/templates/signing.ini.erb
+++ b/modules/signingserver/templates/signing.ini.erb
@@ -22,17 +22,17 @@ public_ssl_cert = <%=@full_public_ssl_ce
 # ips that can connect at all
 allowed_ips = <%= @allowed_ips.join(', ') %>
 allowed_filenames = .*\.exe,.*\.mar,.*\.dll,.*\.bz2,.*\.zip,.*\.dmg,.*\.tar,.*\.checksums,.*\.bundle,.*SUMS,.*\.apk,.*\.bin,plugin-container,firefox(|-bin),libxul\.so,XUL,clearkey\.dll,libclearkey\.(dylib|so),SOURCE
 min_filesize = 10
 <%# if these change frequently or differ per org, consider making them puppetagain config options -%>
 max_filesize_gpg = 812646400
 max_filesize_dmg = 125829120
 max_filesize_mar = 125829120
-max_filesize_mar_sha384 = 125829120
+max_filesize_mar_sha384 = 209715200
 max_filesize_signcode = <%= @signcode_maxsize %>
 max_filesize_osslsigncode = <%= @signcode_maxsize %>
 max_filesize_sha2signcode = <%= @signcode_maxsize %>
 max_filesize_sha2signcodestub = 2097152
 max_filesize_emevoucher = 2097152
 token_secret = <%=@token_secret%>
 <%- if @token_secret0 != '' -%>
 token_secret0 = <%=@token_secret0%>