diff --git a/modules/monitoring/default.nix b/modules/monitoring/default.nix
index d610adf..d346ff3 100644
--- a/modules/monitoring/default.nix
+++ b/modules/monitoring/default.nix
@@ -50,6 +50,8 @@ in
       firewallFilter = "-i wg-monitoring -p tcp -m tcp --dport 9100";
     };
 
+    systemd.services."prometheus-node-exporter".serviceConfig.RestrictAddressFamilies = [ "AF_NETLINK" ];
+
     services.prometheus.exporters.bird = mkIf cfg.bird {
       enable = true;
       openFirewall = true;