NGINX Certbot certificate renewal with SystemD (Let's Encrypt)

certbot-systemd-nginx.md

Create a service unit file

$ nano /etc/systemd/system/certbot-renewal.service

[Unit]
Description=Certbot Renewal

[Service]
ExecStart=/usr/bin/certbot renew --pre-hook "service nginx stop" --post-hook "service nginx start"

Create a timer unit file

$ nano /etc/systemd/system/certbot-renewal.timer

[Unit]
Description=Timer for Certbot Renewal

[Timer]
OnBootSec=300
OnUnitActiveSec=1w

[Install]
WantedBy=multi-user.target

Start & Enable the Service

$ sudo systemctl start certbot-renewal.timer

$ sudo systemctl enable certbot-renewal.timer

---

Check Status

$ systemctl status certbot-renewal.timer

$ journalctl -u certbot-renewal.service