Reducing your attack surface with systemd - a quick guide to hardening #linux services with systemd.service flags

https://krvtz.net/posts/reducing-your-attack-surface-with-systemd.html