diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index 86376e16fc..bb245645f3 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -191,6 +191,10 @@ in {
         "user"
       ];
 
+      timeout_read = "0";  # We have some long-lived connections...
+      timeout_write = "0";
+      timeout_idle = "0";
+
       databroker_storage_type = "redis";
       databroker_storage_connection_string = "redis://127.0.0.1:6379/15";
 
@@ -202,6 +206,9 @@ in {
         baseConfig = {
           allowed_domains = [ "lukegb.com" ];
           pass_identity_headers = true;
+          timeout_read = "30s";
+          timeout_write = "0";
+          timeout_idle = "5m";
         };
         service = server: hostName: extraConfig: baseConfig // {
           from = "https://${hostName}";
@@ -228,8 +235,11 @@ in {
         (secureService "swann:8443" "unifi.int.lukegb.com" {
           tls_skip_verify = true;
           allow_websockets = true;
+          timeout_read = "0";
         })
-        (service "blade-tuvok:7480" "objdump.zxcvbnm.ninja" (public {}))
+        (service "blade-tuvok:7480" "objdump.zxcvbnm.ninja" (public {
+          timeout_read = "30m";  # Uploads can take a while; bump the timeout.
+        }))
         (secureService "totoro" "invoices.lukegb.com" (public {
           regex = "^/((third_party|ajax|client_area|pdf)/.*|[a-zA-Z0-9]{8})$";
         }))