Search notes:
/var/tmp/systemd-private-*
Apparently, these files don't get cleaned up as they should.
Files older than 30 (31?) days can be removed with something like
$ find . -maxdepth 1 -ctime +30 -type d -iname 'systemd-private-*' -exec rm -r {} +