Ubuntu - SystemD - Prevent a service from starting manually

sudo systemctl mask ssh

NOTE: Masked services cannot be started with systemctl start command until it is unmasked.

sudo systemctl unmask ssh