diff --git a/.gitignore b/.gitignore
index be245d3..34e9b08 100644
--- a/.gitignore
+++ b/.gitignore
@@ -10,3 +10,4 @@ Thumbs.db
 notes/
 wallarm
 bin/
+wallarm-upx
diff --git a/Makefile b/Makefile
index 7fc39ea..0a22a9f 100644
--- a/Makefile
+++ b/Makefile
@@ -12,9 +12,11 @@ all: linux-amd64 linux-arm64
 
 linux-amd64:
 	GOOS=linux GOARCH=amd64 go build -ldflags "$(LDFLAGS)" -o $(BINARY)-linux-amd64 ./cmd/wallarm/
+	upx --best --lzma $(BINARY)-linux-amd64 -o $(BINARY)-linux-amd64.tmp 2>/dev/null && mv $(BINARY)-linux-amd64.tmp $(BINARY)-linux-amd64 || true
 
 linux-arm64:
 	GOOS=linux GOARCH=arm64 go build -ldflags "$(LDFLAGS)" -o $(BINARY)-linux-arm64 ./cmd/wallarm/
+	upx --best --lzma $(BINARY)-linux-arm64 -o $(BINARY)-linux-arm64.tmp 2>/dev/null && mv $(BINARY)-linux-arm64.tmp $(BINARY)-linux-arm64 || true
 
 clean:
 	rm -f $(BINARY) $(BINARY)-linux-*
diff --git a/README.md b/README.md
index c6c0f9e..0345064 100644
--- a/README.md
+++ b/README.md
@@ -16,7 +16,7 @@ That's it. The binary runs preflight checks, then opens an interactive TUI:
 
 ## Features
 
-- **Single binary** — 7MB, zero runtime dependencies, works on any Linux
+- **Single binary** — 2MB, zero runtime dependencies, works on any Linux
 - **Interactive TUI** — bubbletea-powered forms and dashboard
 - **Preflight checks** — runs on every start: system, network, cloud reachability, resources
 - **Multi-node** — manage multiple Wallarm nodes on the same host via systemd