Harden systemd service

Hello

I've been using this hardening config for a few weeks now, it doesn't break anything as far as I can tell. Please consider testing it and/or including it in the package. Thanks!