Yep, can recommend systemd in this case, really easy to apply basic hardening to services that just works.