diff --git a/roles/kanboard/templates/kanboard-cron.service b/roles/kanboard/templates/kanboard-cron.service
index 845c7641..b2508ed0 100644
--- a/roles/kanboard/templates/kanboard-cron.service
+++ b/roles/kanboard/templates/kanboard-cron.service
@@ -6,3 +6,12 @@ User=kanboard
 Type=oneshot
 WorkingDirectory={{kanboard_dir}}
 ExecStart=/usr/bin/php ./cli cron
+
+NoNewPrivileges=true
+TimeoutStartSec=3600
+
+ProtectHome=true
+ProtectSystem=full
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true