[Unit]
Description=Renew certificates

[Timer]
Persistent=true
OnCalendar=*-*-* 01:15:00
RandomizedDelaySec=2h

[Install]
WantedBy=timers.target