From ee443483fd1b2835435e3e49b17bc00eb96d1f72 Mon Sep 17 00:00:00 2001
From: C4 Patino <c4patino@gmail.com>
Date: Tue, 9 Jun 2026 15:17:35 -0500
Subject: [PATCH] fix: add proxy timeout to httpd to resolve public domain
 issues with hairpin nat

---
 modules/nixos/services/networking/httpd/default.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/modules/nixos/services/networking/httpd/default.nix b/modules/nixos/services/networking/httpd/default.nix
index bffe004..9f9b489 100644
--- a/modules/nixos/services/networking/httpd/default.nix
+++ b/modules/nixos/services/networking/httpd/default.nix
@@ -93,6 +93,7 @@
           RequestHeader set X-Forwarded-For %{REMOTE_ADDR}s
 
           RewriteEngine On
+          ProxyTimeout 300
           ProxyPreserveHost On
 
           ${honeypotConfig}
@@ -100,7 +101,7 @@
           ${robotsConfig}
 
           # --- ${name} (subdomain access) ---
-          ProxyPass / http://${hostIP}:${p}/
+          ProxyPass / http://${hostIP}:${p}/ connectiontimeout=30 timeout=300 retry=0
           ProxyPassReverse / http://${hostIP}:${p}/
         '';
       }