dehydrated systemd service files

dehydrated.service

[Unit]
Description=letsencrypt/acme client implemented as a shell-script
After=network.target

[Service]
Type=oneshot
ExecStart=/usr/bin/dehydrated -c
ExecStartPost=!/bin/systemctl reload nginx.service
Restart=no

WorkingDirectory=/var/lib/dehydrated
ConfigurationDirectory=dehydrated
StateDirectory=dehydrated

ProtectSystem=full
DynamicUser=yes
NoNewPrivileges=true
ProtectHome=true
PrivateTmp=yes
UMask=007

dehydrated.timer

[Unit]
Description=Checking certificates once a day

[Timer]
OnCalendar=daily
Persistent=true
RandomizedDelaySec=10800

[Install]
WantedBy=timers.target