diff --git a/action.yml b/action.yml
index 49a3f6a..c1b5ef3 100644
--- a/action.yml
+++ b/action.yml
@@ -82,7 +82,7 @@ runs:
           if ! [[ "$SHA256SUM" ]] ; then
             SHA256SUM="$(curl "${URL}.sha256")"
           fi
-          curl "$URL" -o tailscale.tgz
+          curl "$URL" -o tailscale.tgz --max-time 300
           echo "$SHA256SUM  tailscale.tgz" | sha256sum -c
           tar -C /tmp -xzf tailscale.tgz
           rm tailscale.tgz
@@ -113,4 +113,4 @@ runs:
             TAILSCALE_AUTHKEY="${{ inputs['oauth-secret'] }}?preauthorized=true&ephemeral=true"
             TAGS_ARG="--advertise-tags=${{ inputs.tags }}"
           fi
-          sudo -E tailscale up ${TAGS_ARG} --authkey=${TAILSCALE_AUTHKEY} --hostname=${HOSTNAME} --accept-routes ${ADDITIONAL_ARGS}
+          timeout 5m sudo -E tailscale up ${TAGS_ARG} --authkey=${TAILSCALE_AUTHKEY} --hostname=${HOSTNAME} --accept-routes ${ADDITIONAL_ARGS}