From 774c2a98b06209b1628886e9d0ae8eee7567718d Mon Sep 17 00:00:00 2001
From: Urban Guacamole <urban-guacamole@protonmail.com>
Date: Sat, 24 Jul 2021 14:00:21 +0200
Subject: [PATCH] Harden security

---
 api/api.service | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/api/api.service b/api/api.service
index 13a799c..7a93b34 100644
--- a/api/api.service
+++ b/api/api.service
@@ -8,6 +8,9 @@ WorkingDirectory=/home/nextgen
 ExecStart=/home/nextgen/api
 Restart=always
 RestartSec=30
+PrivateTmp=yes
+NoNewPrivileges=true
+PrivateDevices=yes
 
 [Install]
 WantedBy=multi-user.target