[Unit]
Description=Call certbot to renew all certificates
After=network.target

[Service]
User=root
Type=oneshot
ExecStart=/usr/bin/certbot renew