Isolate user dir

[roughnecks]

Hello,

how do I make it so the user I specify when running code-server via systemd unit on debian, can only access their home dir?
Also, I cannot find any doc about configuration options for config.yaml

Thanks