fix: Tor should not be run as daemon since default 'tor.service' systemd file specifies Type=simple
Group directive is deprecated
fix: variables should be escaped
add: NTP synchronize at boot