diff --git a/README.md b/README.md
index f30ba3e..8554ca5 100644
--- a/README.md
+++ b/README.md
@@ -27,9 +27,10 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th
 - streaming video and audio from disk
 - activity detection
 - LDAP support
+- invite user
 
 
-**Shipped version:** 0.6.2~ynh4
+**Shipped version:** 0.7.0~ynh1
 
 **Demo:** https://galene.org:8443/
 
diff --git a/README_fr.md b/README_fr.md
index 1a7870d..e24ad9d 100644
--- a/README_fr.md
+++ b/README_fr.md
@@ -27,9 +27,10 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et
 - streaming vidéo et audio à partir du disque
 - détection d'activité
 - prise en charge LDAP
+- inviter un utilisateur
 
 
-**Version incluse :** 0.6.2~ynh4
+**Version incluse :** 0.7.0~ynh1
 
 **Démo :** https://galene.org:8443/
 
diff --git a/conf/ldap.service b/conf/ldap.service
index 29ca25f..63232f5 100644
--- a/conf/ldap.service
+++ b/conf/ldap.service
@@ -11,5 +11,39 @@ WorkingDirectory=__INSTALL_DIR__/live_ldap/
 ExecStart=__INSTALL_DIR__/live_ldap/galene-ldap -data __INSTALL_DIR__/live_ldap/data/
 LimitNOFILE=65536
 
+# Sandboxing options to harden security
+# Depending on specificities of your service/app, you may need to tweak these
+# .. but this should be a good baseline
+# Details for these options: https://www.freedesktop.org/software/systemd/man/systemd.exec.html
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
+RestrictNamespaces=yes
+RestrictRealtime=yes
+DevicePolicy=closed
+ProtectClock=yes
+ProtectHostname=yes
+ProtectProc=invisible
+ProtectSystem=full
+ProtectControlGroups=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+LockPersonality=yes
+SystemCallArchitectures=native
+SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap @cpu-emulation @privileged
+
+# Denying access to capabilities that should not be relevant for webapps
+# Doc: https://man7.org/linux/man-pages/man7/capabilities.7.html
+CapabilityBoundingSet=~CAP_RAWIO CAP_MKNOD
+CapabilityBoundingSet=~CAP_AUDIT_CONTROL CAP_AUDIT_READ CAP_AUDIT_WRITE
+CapabilityBoundingSet=~CAP_SYS_BOOT CAP_SYS_TIME CAP_SYS_MODULE CAP_SYS_PACCT
+CapabilityBoundingSet=~CAP_LEASE CAP_LINUX_IMMUTABLE CAP_IPC_LOCK
+CapabilityBoundingSet=~CAP_BLOCK_SUSPEND CAP_WAKE_ALARM
+CapabilityBoundingSet=~CAP_SYS_TTY_CONFIG
+CapabilityBoundingSet=~CAP_MAC_ADMIN CAP_MAC_OVERRIDE
+CapabilityBoundingSet=~CAP_NET_ADMIN CAP_NET_BROADCAST CAP_NET_RAW
+CapabilityBoundingSet=~CAP_SYS_ADMIN CAP_SYS_PTRACE CAP_SYSLOG
+
 [Install]
 WantedBy=multi-user.target
diff --git a/doc/DESCRIPTION.md b/doc/DESCRIPTION.md
index 54e9644..2258c68 100644
--- a/doc/DESCRIPTION.md
+++ b/doc/DESCRIPTION.md
@@ -9,3 +9,4 @@ Galène is a videoconference server (an “SFU”) that is easy to deploy and th
 - streaming video and audio from disk
 - activity detection
 - LDAP support
+- invite user
diff --git a/doc/DESCRIPTION_fr.md b/doc/DESCRIPTION_fr.md
index e4a0524..a6c1ffa 100644
--- a/doc/DESCRIPTION_fr.md
+++ b/doc/DESCRIPTION_fr.md
@@ -9,3 +9,4 @@ Galène est un serveur de visioconférence (un « SFU ») facile à déployer et
 - streaming vidéo et audio à partir du disque
 - détection d'activité
 - prise en charge LDAP
+- inviter un utilisateur
diff --git a/manifest.toml b/manifest.toml
index 41765ec..b52f313 100644
--- a/manifest.toml
+++ b/manifest.toml
@@ -5,7 +5,7 @@ name = "Galène"
 description.en = "Videoconferencing server that is easy to deploy"
 description.fr = "Serveur de visioconférence facile à déployer"
 
-version = "0.6.2~ynh4"
+version = "0.7.0~ynh1"
 
 maintainers = ["eric_G"]
 
@@ -18,7 +18,7 @@ userdoc = "https://galene.org/faq.html"
 code = "https://github.com/jech/galene"
 
 [integration]
-yunohost = ">= 11.1.15"
+yunohost = ">= 11.1.17"
 architectures = "all"
 multi_instance = false
 ldap = true
@@ -65,8 +65,8 @@ ram.runtime = "50M"
 
 [resources.sources]
     [resources.sources.main]
-    url = "https://github.com/jech/galene/archive/refs/tags/galene-0.6.2.tar.gz"
-    sha256 = "7caedc1b2cb8cfeee0136e02c006d13d7b2b3cb9908685654c8cec020265428d"
+    url = "https://github.com/jech/galene/archive/refs/tags/galene-0.7.0.tar.gz"
+    sha256 = "b916e9df4ef289c6ffc529808c063b2fa6ef456b0fc66a0673129887f25b4f63"
     autoupdate.strategy = "latest_github_tag"
  
     [resources.sources.ldap]