diff --git a/deploy/setup-https.sh b/deploy/setup-https.sh
index 7db96edd..b7ab1b02 100644
--- a/deploy/setup-https.sh
+++ b/deploy/setup-https.sh
@@ -35,7 +35,12 @@ systemctl enable --now nginx
 
 if [ ! -x "$CERTBOT_DIR/bin/certbot" ]; then
     python3 -m venv "$CERTBOT_DIR"
-    "$CERTBOT_DIR/bin/pip" install --disable-pip-version-check --no-cache-dir 'certbot==5.4.0'
+    "$CERTBOT_DIR/bin/pip" install \
+        --disable-pip-version-check \
+        --no-cache-dir \
+        --timeout 180 \
+        --index-url https://pypi.org/simple \
+        'certbot==5.4.0'
 fi
 
 "$CERTBOT_DIR/bin/certbot" --version