The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.
Source: systemd service sandboxing and security hardening 101 | Ctrl blog
Skip to content 
Because I have CRS Syndrome…