nixos/uptime-kuma: Order lockdown settings lexicographically

        DynamicUser = true;

        ExecStart = "${cfg.package}/bin/uptime-kuma-server";

        Restart = "on-failure";

        ProtectHome = true;

        ProtectSystem = "strict";

        PrivateTmp = true;

        NoNewPrivileges = true;

        PrivateDevices = true;

        ProtectHostname = true;

        PrivateMounts = true;

        PrivateTmp = true;

        ProtectClock = true;

        ProtectKernelTunables = true;

        ProtectKernelModules = true;

        ProtectKernelLogs = true;

        ProtectControlGroups = true;

        NoNewPrivileges = true;

        ProtectHome = true;

        ProtectHostname = true;

        ProtectKernelLogs = true;

        ProtectKernelModules = true;

        ProtectKernelTunables = true;

        ProtectSystem = "strict";

        RemoveIPC = true;

        RestrictRealtime = true;

        RestrictSUIDSGID = true;

        RemoveIPC = true;

        PrivateMounts = true;

      };

    };

  };