diff --git a/roles/nginx/files/renew-letsencrypt.timer b/roles/nginx/files/renew-letsencrypt.timer
index 27a064d..8335dbf 100644
--- a/roles/nginx/files/renew-letsencrypt.timer
+++ b/roles/nginx/files/renew-letsencrypt.timer
@@ -2,8 +2,8 @@
 Description=Renew Let's Encrypt certificates
 
 [Timer]
-# twice a day, at midnight and noon
-OnCalendar=*-*-* 00,12:00:00
+# once a day, at 2AM
+OnCalendar=*-*-* 02:00:00
 # Add a random delay of 0–3600 seconds
 RandomizedDelaySec=3600
 Persistent=true