NixOS Security I: Systemd

First installment to a series on securing your NixOS systems