Security improvements to systemd unit file for production

[dopey]

Here's a good example of a complete unit file with strong security restrictions

Here's another good resource

[tashian]

https://madaidans-insecurities.github.io/guides/linux-hardening.html