[Unit]
Description=Renew certificate %i
Documentation=man:certbot(1)

[Service]
Type=oneshot
EnvironmentFile=/etc/letsencrypt/env/%i
ExecStart=certbot --text --agree-tos --non-interactive certonly --rsa-key-size 4086 --cert-name '%i' -a $AUTHENTICATOR $DOMAINS --post-hook $POST_HOOK --quiet --keep-until-expiring