From a38d822fad7e33eee81ad87e3227c96576a4974e Mon Sep 17 00:00:00 2001
From: Alan Orth <alan.orth@gmail.com>
Date: Fri, 8 Jul 2016 13:50:11 +0300
Subject: [PATCH] roles/nginx: Only run Let's Encrypt checks once a day

I can't remember where I had seen it recommended to be twice a day,
but it seems overkill.
---
 roles/nginx/files/renew-letsencrypt.timer | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/nginx/files/renew-letsencrypt.timer b/roles/nginx/files/renew-letsencrypt.timer
index 27a064d..8335dbf 100644
--- a/roles/nginx/files/renew-letsencrypt.timer
+++ b/roles/nginx/files/renew-letsencrypt.timer
@@ -2,8 +2,8 @@
 Description=Renew Let's Encrypt certificates
 
 [Timer]
-# twice a day, at midnight and noon
-OnCalendar=*-*-* 00,12:00:00
+# once a day, at 2AM
+OnCalendar=*-*-* 02:00:00
 # Add a random delay of 0–3600 seconds
 RandomizedDelaySec=3600
 Persistent=true