Update sourceballs.service

Remove unused devlist-mailer and apply some hardening.

roles/dbscripts/files/sourceballs.service

@@ -4,6 +4,13 @@ Description=Sourceballs
 [Service]
 Type=oneshot
 User=sourceballs
-ExecStart=/usr/bin/bash -c '/srv/repos/svn-community/dbscripts/cron-jobs/sourceballs 2>&1 | /srv/repos/svn-community/dbscripts/cron-jobs/devlist-mailer "Community Sourceballs" "arch-notifications@archlinux.org"'
-ExecStart=/usr/bin/bash -c '/srv/repos/svn-packages/dbscripts/cron-jobs/sourceballs 2>&1 | /srv/repos/svn-packages/dbscripts/cron-jobs/devlist-mailer "Packages Sourceballs" "arch-notifications@archlinux.org"'
-#ExecStart=/usr/bin/find /home/sourceballs/sources -type f -mtime +7 -delete
+ExecStart=/srv/repos/svn-community/dbscripts/cron-jobs/sourceballs
+ExecStart=/srv/repos/svn-packages/dbscripts/cron-jobs/sourceballs
+
+PrivateDevices=true
+NoNewPrivileges=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+
+ProtectKernelTunables=true
+ProtectControlGroups=true