Can't clone private repository with project access token

We have a private repository which we need to clone via HTTPS on some box where the code is supposed to run. For that purpose I configured a project access token with the read_repository scope.

However, fetching or even cloning with that token (it is not expired and I rotated to a new one to rule out any issues with the old token) doesn't do anything anymore. Cloning like

git clone https://oauth2:$TOKEN@gitlab.torproject.org/tpo/network-health/$PROJECT now results in

fatal: unable to access 'https://gitlab.torproject.org/tpo/network-health/$PROJECT/': Recv failure: Connection reset by peer.

That used to work given that I got the repository cloned that way on that box a couple of months ago.