# /etc/systemd/system/letsencrypt-renew.service

```
[Unit]
Description=Renew Let's Encrypt certificates
After=network.target

[Service]
Type=oneshot
ExecStart=/usr/bin/letsencrypt renew --agree-tos
```

# /etc/systemd/system/letsencrypts-renew.timer

```
[Unit]
Description=Renew Let's Encrypt certificates

[Timer]
OnCalendar=weekly
RandomizedDelaySec=24h
Persistent=true
Unit=letsencrypt-renew.service

[Install]
WantedBy=basic.target
```

# /etc/systemd/system/letsencrypt-renew.service.d/nginx.conf

```
[Service]
ExecStartPost=/bin/systemctl reload nginx.service
```