diff --git a/conf/bookwyrm-server.service b/conf/bookwyrm-server.service
index 19c7702..7443b1d 100644
--- a/conf/bookwyrm-server.service
+++ b/conf/bookwyrm-server.service
@@ -16,9 +16,9 @@ InaccessiblePaths=-/media -/mnt -/srv
 PrivateTmp=yes
 TemporaryFileSystem=/var /run /opt __INSTALL_DIR__
 #PrivateUsers=true
-#PrivateDevices=true
+PrivateDevices=true
 BindReadOnlyPaths=__INSTALL_DIR__
-BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
+#BindPaths=__INSTALL_DIR__/images __INSTALL_DIR__/static /var/run/postgresql
 LockPersonality=yes
 MemoryDenyWriteExecute=true
 PrivateMounts=true