[Unit]
Description=Check for acme certs about to expire
[Service]
Type=oneshot
Nice=19
ProtectHome=true
ProtectSystem=true
User=acme
Group=acme
SyslogIdentifier=acme-tiny
ExecStart=/usr/libexec/acme-tiny/sign 7
[Install]
Also=acme-tiny.timer