diff --git a/roles/libravatar/files/cron.daily/libravatar b/roles/libravatar/files/cron.daily/libravatar
new file mode 100644
index 0000000000..7ca1fdfa23
--- /dev/null
+++ b/roles/libravatar/files/cron.daily/libravatar
@@ -0,0 +1,3 @@
+#!/bin/bash
+
+certbot renew --post-hook 'systemctl reload httpd'
diff --git a/roles/libravatar/tasks/main.yml b/roles/libravatar/tasks/main.yml
index 47048d1519..70456a2c98 100644
--- a/roles/libravatar/tasks/main.yml
+++ b/roles/libravatar/tasks/main.yml
@@ -21,6 +21,7 @@
   - postfix
   - mod_ssl
   - letsencrypt
+  - cronie
 
 - name: configure postfix for email encryption and not relaying to bastion
   command: "{{ item }}"
@@ -118,7 +119,11 @@
   tags:
   - config
 
-- name: ensure httpd state
+- name: cron.daily job
+  copy: src="cron.daily/libravatar" dest="/etc/cron.daily/libravatar"
+
+- name: ensure service states
   service: state=started enabled=yes name={{ item }}
   with_items:
   - httpd
+  - crond