diff --git a/nixos/modules/issuer.nix b/nixos/modules/issuer.nix
index e0d1f6560e48748854ab5bcd4613b50c2f24cbcd..cd8dde46f78bb7aec1eff478481c256ffb7e4027 100644
--- a/nixos/modules/issuer.nix
+++ b/nixos/modules/issuer.nix
@@ -214,6 +214,14 @@ in {
           # we pass less scanning spam on to our backend
           # Want a regex instead? try locations."~ /v\d+/"
           proxyPass = "http://127.0.0.1:${internalHttpPort}";
+
+          # Up the proxy timeouts from the default of 60s
+          # (don't hang up before receiving our client's ZKAPs)
+          extraConfig = ''
+            proxy_read_timeout 600s;
+            proxy_send_timeout 600s;
+            keepalive_timeout 600s;
+          '';
         };
         locations."/metrics" = {
           # Only allow our monitoringvpn subnet