removes unavailable params

modules/actual-server/default.nix

@@ -18,33 +18,4 @@
       RestartSec = 3;
     };
   };
-
-  # hardening
-  RestrictAddressFamilies = [
-    "AF_INET"
-    "AF_INET6"
-    "AF_UNIX"
-    "AF_NETLINK"
-  ];
-  PrivateTmp = true;
-  PrivateUsers = true;
-  ProtectClock = true;
-  ProtectControlGroups = true;
-  ProtectHome = true;
-  ProtectKernelLogs = true;
-  ProtectKernelModules = true;
-  ProtectKernelTunables = true;
-  ProtectSystem = "strict";
-  RemoveIPC = true;
-  RestrictNamespaces = true;
-  RestrictRealtime = true;
-  RestrictSUIDSGID = true;
-  SystemCallArchitectures = "native";
-  SystemCallFilter = [
-    "@system-service"
-    "~@resources"
-  ];
-  ProtectProc = "invisible";
-  ProtectHostname = true;
-  UMask = "0077";
 }