From f32e0bfe59f9f47d727eb195d3367ca8478c4837 Mon Sep 17 00:00:00 2001
From: Jake Howard <git@theorangeone.net>
Date: Tue, 31 Mar 2020 19:27:47 +0100
Subject: [PATCH] Only add timeout for core HTTP ports

---
 ansible/roles/gateway/files/haproxy.cfg | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/ansible/roles/gateway/files/haproxy.cfg b/ansible/roles/gateway/files/haproxy.cfg
index 7d12832..bb6c39d 100644
--- a/ansible/roles/gateway/files/haproxy.cfg
+++ b/ansible/roles/gateway/files/haproxy.cfg
@@ -14,10 +14,6 @@ defaults
   mode	http
   option	httplog
   option	dontlognull
-  timeout http-request 60s
-  timeout connect 10s
-  timeout client  10s
-  timeout server  10s
   errorfile 400 /etc/haproxy/errors/400.http
   errorfile 403 /etc/haproxy/errors/403.http
   errorfile 408 /etc/haproxy/errors/408.http
@@ -29,6 +25,10 @@ defaults
 listen https
   bind *:443
   mode tcp
+  timeout http-request 60s
+  timeout connect 10s
+  timeout client  10s
+  timeout server  10s
   server default {{ wireguard.clients.intersect.ip }}:443 send-proxy
 
 listen http
@@ -37,6 +37,10 @@ listen http
   stats show-node
   stats uri /haproxy
   stats auth stats:{{ haproxy.stats_pass }}
+  timeout http-request 60s
+  timeout connect 10s
+  timeout client  10s
+  timeout server  10s
   server default {{ wireguard.clients.intersect.ip }}:80 check
 
 {% for port in haproxy.exposed_ports %}