Relax protect system setting to full instead

This allows RW operations without specifying read write paths, for as long as user did not pick crucial directories for operation, and they should not.

Signed-off-by: Łukasz Domeradzki <JustArchi@JustArchi.net>

Author: JustArchi

admin_manual/configuration_server/background_jobs_configuration.rst

@@ -158,7 +158,7 @@ This approach requires two files: **nextcloudcron.service** and **nextcloudcron.
   ProtectKernelModules=yes
   ProtectKernelTunables=yes
   ProtectProc=invisible
-  ProtectSystem=strict
+  ProtectSystem=full
   RemoveIPC=yes
   RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
   RestrictNamespaces=yes