Merge branch 'arch-boxes-hardening' into 'master'

arch_boxes_sync: Quick service filesystem hardening

See merge request !315
2 jobs for master in 37 seconds (queued for 2 seconds)