Wiki/kimsufi-private-cloud/letsencrypt-timer.md

/etc/systemd/system/letsencrypt-renew.service

[Unit]
Description=Renew Let's Encrypt certificates
After=network.target

[Service]
Type=oneshot
ExecStart=/usr/bin/letsencrypt renew --agree-tos

/etc/systemd/system/letsencrypts-renew.timer

[Unit]
Description=Renew Let's Encrypt certificates

[Timer]
OnCalendar=weekly
RandomizedDelaySec=24h
Persistent=true
Unit=letsencrypt-renew.service

[Install]
WantedBy=basic.target

/etc/systemd/system/letsencrypt-renew.service.d/nginx.conf

[Service]
ExecStartPost=/bin/systemctl reload nginx.service