My suggestion is to not hardcode a limit, and let the loop count fail (in cases where too many tiles are requested), so that individual users of the dungeon system can decide how long the maximum generation time they’re willing to have is going to be.
For my part, I’d probably just generate a lot of dungeons offline and then just package them up and choose one at runtime, so that I can have quick loading and huge dungeons.