0 20 * * * root python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew