Systemd Certbot Apache Timer

Service

• /etc/systemd/system/certbot.service

[Unit]
Description=Let's Encrypt renewal

[Service]
Type=oneshot
ExecStart=/usr/bin/certbot renew --pre-hook "/bin/systemctl stop apache2.service" --post-hook "/bin/systemctl start apache2.service" --quiet --agree-tos

Timer

• /etc/systemd/system/certbot.timer

[Unit]
Description=Twice daily renewal of Let's Encrypt's certificates

[Timer]
OnCalendar=0/12:00:00
RandomizedDelaySec=1h
Persistent=true

[Install]
WantedBy=timers.target

Activate

• systemctl daemon-reload

Enable and start

• systemctl start certbot.timer

Renew when change timer settings

systemctl reenable --now certbot.timer