SYS-0037

systemd Service Hardening Generator

Add sandboxing options (ProtectSystem, PrivateTmp etc.). Read the draft before you paste it into a shell.

Updated 25 October 2026