nix: raise the integration check timeout for slow nested-docker tests

The VM's nested docker runs multi-network route-convergence tests several-fold
slower than bare metal, and -test.timeout=20m was too tight for the slowest
(TestAutoApproveMultiNetwork timed out mid-run). Raise it to 45m with a matching
globalTimeout so a slow test hits its own clean Go timeout, not the driver's.

Author: kradalby

nix/tests/integration.nix

@@ -52,6 +52,10 @@ in
 {
   name = "integration-${name}${lib.optionalString postgres "-pg"}";
 
+  # Cap the whole VM run above the per-test timeout below (45m) plus image-load
+  # and boot, so a slow test hits its own clean Go timeout, not the driver's.
+  globalTimeout = 4200;
+
   nodes.machine = { ... }: {
     virtualisation.docker.enable = true;
 
@@ -136,8 +140,12 @@ in
         "-e CI=1 "
         "-e SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt "
         "headscale:nix "
-        "${testBin}/bin/integration.test -test.run '^${name}$' -test.v -test.timeout=20m",
-        timeout=1800,
+        # Heavy tests (multi-network route convergence) run several-fold slower
+        # in the VM's nested docker than against bare metal; 20m was too tight
+        # for the slowest (TestAutoApproveMultiNetwork). Give generous headroom,
+        # within the globalTimeout set above.
+        "${testBin}/bin/integration.test -test.run '^${name}$' -test.v -test.timeout=45m",
+        timeout=2820,
     )
     print(out)