Replace certsync cron job with systemd timer

roles/certsync/templates/certsync

@@ -19,5 +19,5 @@ chmod 440 $CERT_DIR/*
 
 COUNT=$(find $CERT_DIR -mtime -7 | wc -l)
 if [ $COUNT -gt 0 ]; then
-  service nginx reload > /dev/null
+  systemctl reload nginx > /dev/null
 fi

roles/certsync/templates/certsync.service

@@ -0,0 +1,6 @@
+[Unit]
+Description=Synchronize TLS certificates from {{ certsync_host }}
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/certsync

roles/certsync/templates/certsync.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Weekly certsync run
+
+[Timer]
+OnCalendar=Mon *-*-* 05:00
+RandomizedDelaySec=60m
+Persistent=true
+
+[Install]
+WantedBy=timers.target