[Unit]
Description=Renew certificates used by NGINX regularly

[Timer]
OnBootSec=0
OnUnitActiveSec=1d

[Install]
WantedBy=timers.target