diff --git a/api/api.service b/api/api.service
index 13a799c..7a93b34 100644
--- a/api/api.service
+++ b/api/api.service
@@ -8,6 +8,9 @@ WorkingDirectory=/home/nextgen
 ExecStart=/home/nextgen/api
 Restart=always
 RestartSec=30
+PrivateTmp=yes
+NoNewPrivileges=true
+PrivateDevices=yes
 
 [Install]
 WantedBy=multi-user.target