diff --git a/kubernetes/infrastructure/velero/helmrelease.yaml b/kubernetes/infrastructure/velero/helmrelease.yaml
index 6c43aafe..036406b4 100644
--- a/kubernetes/infrastructure/velero/helmrelease.yaml
+++ b/kubernetes/infrastructure/velero/helmrelease.yaml
@@ -56,9 +56,16 @@ spec:
       # the immich library (~250 GiB, millions of small files) — CSI
       # VolumeSnapshotContent provisioning + Kopia repo prep on the
       # node-agent can take longer than that on this cluster's
-      # ceph-cluster-csi pace. Bump server flag to 4 h.
-      dataMoverPrepareTimeout: 4h
-      defaultItemOperationTimeout: 4h
+      # ceph-cluster-csi pace.
+      #
+      # itemOperationTimeout caps the async DataUpload/DataDownload
+      # itself. The immich-library upload now runs ~3h50m–4h+, so at the
+      # old 4 h cap it was intermittently Canceled at exactly 4 h (no
+      # snapshot written → PartiallyFailed backup → restore-test fails
+      # with "snapshot not found"). The volume is still growing, so both
+      # timeouts are at 8 h to leave real headroom.
+      dataMoverPrepareTimeout: 8h
+      defaultItemOperationTimeout: 8h
       backupStorageLocation:
         - name: default
           provider: aws