diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service
index eea6724..086d7eb 100644
--- a/conf/bookwyrm-server.service
+++ b/conf/bookwyrm-server.service
@@ -15,9 +15,9 @@ ProtectSystem=strict
 ProtectHome=tmpfs
 InaccessiblePaths=-/media -/mnt -/srv
 PrivateTmp=yes
-#TemporaryFileSystem=/var /run
+TemporaryFileSystem=/var /run
 #PrivateUsers=true
-#PrivateDevices=true
+PrivateDevices=true
 #BindReadOnlyPaths=__INSTALL_DIR__
 #BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
 LockPersonality=yes