certbot systemd unit creation

certbot-systemd.sh

#!/bin/bash
set -e

# create service unit file
cat << EOF >  /etc/systemd/system/certbot.service
[Unit]
Description=Certbot
Documentation=file:///usr/share/doc/python-certbot-doc/html/index.html
Documentation=https://certbot.eff.org/docs

[Service]
Type=oneshot
ExecStart=/usr/bin/certbot -q renew
PrivateTmp=true
EOF

# create timer unit file
cat << EOF > /etc/systemd/system/certbot.timer
[Unit]
Description=Run certbot daily
After=network-online.target

[Timer]
OnCalendar=*-*-* 02:00:00
RandomizedDelaySec=7200
Persistent=true

[Install]
WantedBy=timers.target
EOF

# ask systemd to reload unit files
systemctl daemon-reload

# enable units and start timer
systemctl enable certbot.timer certbot.service
systemctl start certbot.timer

# check state
systemctl status certbot.timer certbot.service

# revert above setting
set +e