From 09c0be8312f52fbd00efba2c6c5111a001da511b Mon Sep 17 00:00:00 2001
From: Haylan <code@arthurerlich.ch>
Date: Tue, 7 Jul 2026 13:31:03 +0200
Subject: [PATCH] config: cap http_client timeout and max_duration

Per-request bounds so a single slow/hung provider can't stall the
whole request indefinitely once fetching happens concurrently.
---
 config/packages/framework.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
index 4f01569..bf8d174 100644
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -7,3 +7,7 @@ framework:
     cache:
         app: cache.adapter.filesystem
         default_redis_provider: 'redis://localhost'
+    http_client:
+        default_options:
+            timeout: 10       # connect + wait-for-first-byte cap per request
+            max_duration: 15  # hard cap on total request duration