diff --git a/server/mailer.js b/server/mailer.js
index 9bbe562..11f5a85 100644
--- a/server/mailer.js
+++ b/server/mailer.js
@@ -17,6 +17,10 @@ if (SMTP_HOST && SMTP_USER && SMTP_PASS) {
     port: SMTP_PORT,
     secure: SMTP_PORT === 465,
     auth: { user: SMTP_USER, pass: SMTP_PASS },
+    connectionTimeout: 10_000,
+    greetingTimeout: 10_000,
+    socketTimeout: 15_000,
+    tls: { rejectUnauthorized: false }, // tunnel relay cert is for mail.keylinkit.net, not 172.17.0.1
   })
   console.log(`[mailer] SMTP configured: ${SMTP_HOST}:${SMTP_PORT}`)
 } else {