diff --git a/files/forgejo.service b/files/forgejo.service
index ad80645..e3dc690 100644
--- a/files/forgejo.service
+++ b/files/forgejo.service
@@ -51,6 +51,9 @@ After=network.target
 ###
 
 [Service]
+# NOTE: I found that Let's Encrypt certificates only renew when the service
+# starts, so let's make sure we're restarting every so often.
+RuntimeMaxSec=7d
 # Uncomment the next line if you have repos with lots of files and get a HTTP 500 error because of that
 # LimitNOFILE=524288:524288
 RestartSec=2s