[Unit]
Description=check for acme certs about to expire and renew them
ConditionKernelCommandLine=!rd.live.image
After=network-online.target
After=httpd.service nginx.service

[Timer]
OnBootSec=20min
OnUnitInactiveSec=24h
Unit=acme-tiny.service

[Install]
WantedBy=timers.target