From 5df6fad01ca4473ef19ec614807e8cf0939e0db3 Mon Sep 17 00:00:00 2001
From: Andrea Dell'Amico <andrea.dellamico@isti.cnr.it>
Date: Thu, 12 Feb 2026 16:19:28 +0100
Subject: [PATCH] Add a high default tunnel timeout when websockets are in use
 by the backend.

---
 templates/haproxy.cfg.j2 | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/templates/haproxy.cfg.j2 b/templates/haproxy.cfg.j2
index 453f8f3..e7f8492 100644
--- a/templates/haproxy.cfg.j2
+++ b/templates/haproxy.cfg.j2
@@ -291,6 +291,10 @@ backend {{ srv.acl_name }}_bck
 {% else %}
     mode http
     option httpchk
+    {% if srv.enable_websocket is defined and srv.enable_websocket %}
+    option http-server-close
+    timeout tunnel {{ haproxy_tunnel_timeout | default('1h') }}
+    {% endif %}
     balance {{ srv.balance_type | default('roundrobin') }}
 {% if srv.http_check_enabled is defined and srv.http_check_enabled %}
     http-check send {{ srv.http_check }}