diff --git a/x-ui.service b/x-ui.service
index 29d2a63a..3b375c3e 100644
--- a/x-ui.service
+++ b/x-ui.service
@@ -10,6 +10,13 @@ WorkingDirectory=/usr/local/x-ui/
 ExecStart=/usr/local/x-ui/x-ui
 Restart=on-failure
 RestartSec=5s
+ProtectHome=tmpfs
+ProtectKernelModules=true
+ProtectControlGroups=true
+ProtectKernelLogs=true
+ProtectHostname=true
+ProtectClock=true
+MemoryDenyWriteExecute=true
 
 [Install]
-WantedBy=multi-user.target
\ No newline at end of file
+WantedBy=multi-user.target