diff --git a/unit/rtkbase_web.service b/unit/rtkbase_web.service
index c85e6f59..b88245ea 100644
--- a/unit/rtkbase_web.service
+++ b/unit/rtkbase_web.service
@@ -8,6 +8,9 @@ User=root
 ExecStart={python_path} {script_path}/web_app/server.py
 Restart=on-failure
 RestartSec=30
+ProtectHome=read-only
+ProtectSystem=strict
+ReadWritePaths={script_path}
 
 [Install]
 WantedBy=multi-user.target