That's how I do it. Path units are a good solution here as they maintain loose coupling between the cert management and consumption. On Mon, Jul 31, 2023, at 16:56, Max Gautier wrote: > On Mon, Jul 31, 2023 at 03:23:26PM -0500, Ian Pilcher wrote: >> I have created service (along with an associated timer) that checks the >> remaining life of a TLS certificate and retrieves an updated certificate >> from Let's Encrypt if the remaining life is too short. > > Is the updated certificate placed in the same file ? If so, maybe you > could use a path unit with PathChanged=/path/to/your/cert ? > > -- > Max Gautier