diff --git a/roles/prep_letsencrypt/tasks/CentOS.yml b/roles/prep_letsencrypt/tasks/CentOS.yml
index e9507d93..fa199966 100644
--- a/roles/prep_letsencrypt/tasks/CentOS.yml
+++ b/roles/prep_letsencrypt/tasks/CentOS.yml
@@ -9,4 +9,10 @@
       - requests
       - setuptools
       - certbot-nginx 
-    state: latest
\ No newline at end of file
+    state: latest
+
+- name: letsencrypt renewal cronjob
+  cron:
+    name:   "letsencrypt automatic renewal"
+    hour:   "3,15" 
+    job: "python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew"