diff --git a/VERSION b/VERSION
index 49e0a31..14bee92 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-1.23.1
+1.23.2
diff --git a/VERSIONS.md b/VERSIONS.md
index 77bc56f..82ac624 100644
--- a/VERSIONS.md
+++ b/VERSIONS.md
@@ -17,6 +17,7 @@ Git tags: `vMAJOR.FEATURE.FIX` (e.g. `v1.8.0`). File `VERSION` omits the `v` pre
 
 | Tag | Date (UTC) | Notes |
 |-----|------------|--------|
+| **v1.23.2** | 2026-07-19 | **Bugfix:** max-ladder host-agent forces **RUN_TIMEOUT=10800** (koopa env had 600 → run aborted mid-ladder); install starts oneshots with **--no-block**. |
 | **v1.23.1** | 2026-07-19 | **Fix / scope:** only **`/monitoring-max-ladder/`** for GOA (drop classic `/monitoring-ladder`). Daily timer + install first-run. monpages catalog/Caddy bare redirs for max-ladder only. |
 | **v1.23.0** | 2026-07-19 | **Feature:** GOA daily mon page **`/monitoring-max-ladder/`** (max-search) on bank/exchange/taler.hacktivism.ch *(1.23.0 briefly also had classic ladder; removed in 1.23.1)*. |
 | **v1.22.1** | 2026-07-19 | **Bugfix (UX):** pay wait after withdraw no longer looks hung — shows **withdraw board in start order** (OK/OK_BANK from TSV) with live wallet status (`pendingIncoming` → `done`) + timer + aggregate available/pendingIncoming on the **same** wallet DB. Short `run-pending` nudge only (no run-until-done). Default wait 90s (`LADDER_PAY_WAIT_AVAILABLE_S`). |
diff --git a/host-agent/install-host-agent.sh b/host-agent/install-host-agent.sh
index 42c87d6..118ef7f 100755
--- a/host-agent/install-host-agent.sh
+++ b/host-agent/install-host-agent.sh
@@ -88,11 +88,12 @@ install_local() {
   systemctl --user daemon-reload 2>/dev/null || true
   # initial stamp so path exists
   "$ROOT/touch-software-stamp.sh"
-  systemctl --user start taler-monitoring-hacktivism.service || true
-  systemctl --user start taler-monitoring-surface.service || true
-  systemctl --user start taler-monitoring-aptdeploy.service || true
+  # oneshot jobs: --no-block so install does not wait hours
+  systemctl --user start --no-block taler-monitoring-hacktivism.service || true
+  systemctl --user start --no-block taler-monitoring-surface.service || true
+  systemctl --user start --no-block taler-monitoring-aptdeploy.service || true
   # first max-ladder round immediately (daily thereafter)
-  systemctl --user start taler-monitoring-max-ladder.service || true
+  systemctl --user start --no-block taler-monitoring-max-ladder.service || true
 
   echo "--- status ---"
   systemctl --user status taler-monitoring-hacktivism.path --no-pager -l | head -15
diff --git a/host-agent/run-max-ladder-monitoring.sh b/host-agent/run-max-ladder-monitoring.sh
index c8735a8..ebba236 100755
--- a/host-agent/run-max-ladder-monitoring.sh
+++ b/host-agent/run-max-ladder-monitoring.sh
@@ -20,8 +20,8 @@ export INSIDE_MODE="${INSIDE_MODE:-local-podman}"
 export LOCAL_STACK="${LOCAL_STACK:-1}"
 export SKIP_SSH="${SKIP_SSH:-0}"
 export CONTINUE_ON_ERROR="${CONTINUE_ON_ERROR:-1}"
-# max-search probes + pay hunt
-export RUN_TIMEOUT="${RUN_TIMEOUT:-10800}"
+# max-search probes + pay hunt — force high wall clock (koopa env often has RUN_TIMEOUT=600)
+export RUN_TIMEOUT="${MAX_LADDER_RUN_TIMEOUT:-10800}"
 
 export PHASES="max-ladder monpages"
 export MON_HOSTS="${MON_HOSTS:-bank.hacktivism.ch exchange.hacktivism.ch taler.hacktivism.ch}"