diff --git a/playbooks/roles/mirror/templates/mirror.vhost.j2 b/playbooks/roles/mirror/templates/mirror.vhost.j2
index 45dbb614e3..f13f9c2f9e 100644
--- a/playbooks/roles/mirror/templates/mirror.vhost.j2
+++ b/playbooks/roles/mirror/templates/mirror.vhost.j2
@@ -51,6 +51,11 @@ ErrorLogFormat "[%{cu}t] [%-m:%l] [pid %P:tid %T] %7F: %E: [client\ %a] %M% , \
     # 5GiB
     CacheMaxFileSize 5368709120
     CacheStoreExpired On
+    # NOTE(frickler): 1h is a compromise between wanting to cache larger
+    # files for longer, like wheels and tarballs, but reducing the impact
+    # of broken or outdated index pages which we get delivered from pypi
+    # CDN sometimes.
+    CacheMaxExpire 3600
     # Pip sets Cache-Control: max-age=0 on requests for pypi index pages.
     # This means we don't use the cache for those requests. This setting
     # should force the proxy to ignore cache-control on the request side