The systemd-analyze security command gives your systemd service units an automated security rating. This is a good starting point for security hardening.