Commit 78043e9fa52f

@@ -266,8 +266,10 @@ in
     };
 
     # Prometheus exporter for restic backup monitoring
+    # DISABLED: Causes excessive load (restic check every 60s over SFTP)
+    # TODO: Re-enable with local repository or periodic timer-based checks
     prometheus.exporters.restic = {
-      enable = true;
+      enable = false;
       port = 9753;
       user = "vincent"; # Must run as vincent to access SSH keys for aix
       group = "users";
@@ -375,17 +377,18 @@ in
 
   # Override prometheus-restic-exporter service to disable DynamicUser
   # This is needed so the service runs as vincent and can access SSH keys
-  systemd.services.prometheus-restic-exporter.serviceConfig = {
-    DynamicUser = lib.mkForce false;
-    User = lib.mkForce "vincent";
-    Group = lib.mkForce "users";
-    ProtectHome = lib.mkForce false; # Disable home protection to allow SSH control sockets
-    RestrictAddressFamilies = lib.mkForce [
-      "AF_UNIX"
-      "AF_INET"
-      "AF_INET6"
-    ]; # Allow all network families for SSH
-  };
+  # DISABLED: Service is currently disabled due to excessive load
+  # systemd.services.prometheus-restic-exporter.serviceConfig = {
+  #   DynamicUser = lib.mkForce false;
+  #   User = lib.mkForce "vincent";
+  #   Group = lib.mkForce "users";
+  #   ProtectHome = lib.mkForce false; # Disable home protection to allow SSH control sockets
+  #   RestrictAddressFamilies = lib.mkForce [
+  #     "AF_UNIX"
+  #     "AF_INET"
+  #     "AF_INET6"
+  #   ]; # Allow all network families for SSH
+  # };
 
   networking = {
     useDHCP = lib.mkDefault true;
@@ -397,7 +400,7 @@ in
         8686 # Lidarr
         9000 # Node exporter
         9709 # Lidarr exportarr (prometheus)
-        9753 # Restic exporter (prometheus)
+        # 9753 # Restic exporter (prometheus) - DISABLED
         9091 # Transmission (music torrents)
         # NFS ports
         111 # rpcbind