--- ergo/distrib/systemd/ergo.service	2022-04-12 18:29:45.084164536 +0200
+++ ergo.service	2022-04-12 19:00:33.938153767 +0200
@@ -1,7 +1,7 @@
 [Unit]
 Description=ergo
 After=network.target
-# If you are using MySQL for history storage, comment out the above line
+# If you are using a local MySQL server for history storage, comment out the above line
 # and uncomment these two instead (you must independently install and configure
 # MySQL for your system):
 # Wants=mysql.service
@@ -10,12 +10,18 @@
 [Service]
 Type=notify
 User=ergo
-WorkingDirectory=/home/ergo
-ExecStart=/home/ergo/ergo run --conf /home/ergo/ircd.yaml
+Group=ergo
+ExecStart=/usr/bin/ergo run --conf /etc/ergo/ircd.yaml
 ExecReload=/bin/kill -HUP $MAINPID
 Restart=on-failure
 LimitNOFILE=1048576
 NotifyAccess=main
+ProtectSystem=strict
+ProtectHome=yes
+PrivateDevices=yes
+ProtectKernelLogs=yes
+ReadWritePaths=/var/lib/ergo
+RuntimeDirectory=ergo
 # Uncomment this for a hidden service:
 # PrivateNetwork=true