diff --git a/certbot/Dockerfile b/certbot/Dockerfile
new file mode 100644
index 0000000..27794b5
--- /dev/null
+++ b/certbot/Dockerfile
@@ -0,0 +1,15 @@
+FROM debian:buster-slim
+
+ARG DEBIAN_FRONTEND=noninteractive
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends \
+        certbot \
+        python3-certbot-dns-rfc2136 \
+        cron \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY certbot-renew /etc/cron.d/
+
+VOLUME ["/etc/letsencrypt"]
+
+CMD ["cron", "-f"]
diff --git a/certbot/certbot-renew b/certbot/certbot-renew
new file mode 100644
index 0000000..9293dbd
--- /dev/null
+++ b/certbot/certbot-renew
@@ -0,0 +1,2 @@
+MAILTO=hostmaster
+0 */12 * * * root certbot -q renew