add duckbot (CloudBot) unit file.

Fix formatting and add hardening variables

Signed-off-by: Pratyush Desai <pratyush.desai@liberta.casa>

systemd/duckbot.service

@@ -0,0 +1,20 @@
+[Unit]
+Description=CloudBot (duckbot)
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/duckbot/CloudBot
+ExecStart=/opt/duckbot/venv/bin/python -m cloudbot
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=always
+User=duckbot
+Group=duckbot
+SyslogIdentifier=duckbot
+ProtectSystem=strict
+ProtectHome=yes
+NoNewPrivileges=true
+ReadWritePaths=/opt/duckbot/CloudBot
+
+[Install]
+WantedBy=multi-user.target