
I've also removed PrivateTmp = true because this is implied by dynamic user. I've left ProtectHome = true because I believe this is stronger than ProtectHome = "read-only" which DynamicUser implies.
*** NixOS *** NixOS is a Linux distribution based on the purely functional package management system Nix. More information can be found at https://nixos.org/nixos and in the manual in doc/manual.