diff --git a/nightscout/nightscout.service b/nightscout/nightscout.service
index 2ab3e01..59fab0c 100644
--- a/nightscout/nightscout.service
+++ b/nightscout/nightscout.service
@@ -3,11 +3,13 @@ Description=Nightscout CGM.
 
 [Service]
 WorkingDirectory=/usr/lib/node_modules/nightscout
-ExecStart=/usr/bin/node /usr/lib/node_modules/nightscout/server.js
+ExecStart=/usr/bin/node server.js
 DynamicUser=yes
 
 EnvironmentFile=/etc/nightscout/nightscout-environ
 
+ReadOnlyPaths=/usr/lib/node_modules/nightscout
+
 Restart=on-failure
 
 PrivateTmp=yes
@@ -33,7 +35,7 @@ RestrictSUIDSGID=yes
 NoNewPrivileges=yes
 LockPersonality=yes
 
-MemoryDenyWriteExecute=yes
+#MemoryDenyWriteExecute=yes
 
 CapabilityBoundingSet=
 SystemCallArchitectures=native