modules/monitoring: fix node exporter interface stats access

hosts/carbon/configuration.nix

@@ -277,6 +277,7 @@
     enable = true;
     id = "104";
     pubkey = "sro9DUSMtVr5xV2o3GTgg+0vmLj+bRc8fN+3pIr6+HY=";
+    blackbox = true;
   };
 
   services.unbound = {

modules/monitoring/default.nix

@@ -50,6 +50,8 @@ in
       firewallFilter = "-i wg-monitoring -p tcp -m tcp --dport 9100";
     };
 
+    systemd.services."prometheus-node-exporter".serviceConfig.RestrictAddressFamilies = [ "AF_NETLINK" ];
+
     services.prometheus.exporters.bird = mkIf cfg.bird {
       enable = true;
       openFirewall = true;