Set systemd log level to error. I don't like my log flooded by nonsense.

/etc/systemd/system.conf

LogLevel=crit

(emerg, alert, crit, err, warning, notice, info, debug)

Limit systemd journal by editing /etc/systemd/journald.conf

SystemMaxUse=10M

# systemctl <enable|disable|start|stop|restart|reload|status> service

# systemctl reset-failed service

Save this file as /lib/systemd/system/nginx.service

[Unit]
Description=The NGINX HTTP and reverse proxy server
After=syslog.target network.target remote-fs.target nss-lookup.target

[Service]
Type=forking
PIDFile=/run/nginx.pid
ExecStartPre=/usr/sbin/nginx -t
ExecStart=/usr/sbin/nginx
ExecReload=/bin/kill -s HUP $MAINPID
ExecStop=/bin/kill -s QUIT $MAINPID
PrivateTmp=true
LimitNOFILE=60000

[Install]
WantedBy=multi-user.target

touch /etc/systemd/system/rc-local.service
systemctl enable rc-local

[Unit]
 Description=/etc/rc.local Compatibility
 ConditionPathExists=/etc/rc.local

[Service]
 Type=forking
 ExecStart=/etc/rc.local start
 TimeoutSec=0
 StandardOutput=tty
 RemainAfterExit=yes

[Install]
 WantedBy=multi-user.target

systemd-analyze security nginx.service