diff --git a/manifests/hub.yaml b/manifests/hub.yaml
index 0c56fb16..479a5ad8 100644
--- a/manifests/hub.yaml
+++ b/manifests/hub.yaml
@@ -44,7 +44,11 @@ metadata:
   namespace: felhom-system
   labels:
     app: hub
-    recurring-job-group.longhorn.io/default: enabled
+    # D40 (operator 2026-10-24, R-1243): the hub's volume is NOT in DooPlex's Longhorn backup — that copy was plain
+    # and sat in an open NFS folder. The hub's off-site copy is the encrypted 6-hourly DB copy to ep0
+    # (scripts/hub-db-backup, `05` §16.2). `disabled`, not a removed label: ArgoCD does not prune a label, and a
+    # volume with no recurring-job label falls into Longhorn's default group (backed up).
+    recurring-job-group.longhorn.io/default: disabled
 spec:
   accessModes:
     - ReadWriteOnce