/etc/systemd/system/certbot-renew.timer [Unit] Description=Performs periodically, at arbitrary times, verification for renewal of Let's Encrypt certificates [Timer] OnCalendar=*-*-* 12,00:00:00 Unit=certbot-renew.service AccuracySec=1h RandomizedDelaySec=6h Persistent=true [Install] WantedBy=timers.target /etc/systemd/system/certbot-renew.service [Unit] Description=Renew Let's Encrypt certificates After=network.target [Service] Type=simple ExecStart=/bin/certbot renew --standalone --pre-hook "systemctl stop httpd && sleep 2" --post-hook "systemctl start httpd" User=root [Install] WantedBy=multi-user.target