In current versions, systemd will set for itself RLIMIT_NOFILE to the highest value the kernel allows, which is the value readable from /proc/sys/fs/nr_open. systemd needs to deal with a lot of file descriptors, hence operating with the kernel's default of 1K is not going to work.