diff --git a/lb/acme_refresh/Makefile b/lb/acme_refresh/Makefile
new file mode 100644
index 0000000..73f43c2
--- /dev/null
+++ b/lb/acme_refresh/Makefile
@@ -0,0 +1,20 @@
+WD=/var/lib/dags/acme_refresh
+
+###############################################################################
+
+ACME_DIR=/srv/certs/acme
+DOMAIN=monotremata.xyz
+CERT_PATH=$(ACME_DIR)/$(DOMAIN)
+FULLCHAIN=$(CERT_PATH)/fullchain.cer
+CERT=$(CERT_PATH)/$(DOMAIN).cer
+KEY=$(CERT_PATH)/$(DOMAIN).key
+
+APKOVL=/media/mmcblk0p2/lb.apkovl.tar.gz
+
+###############################################################################
+
+$(APKOVL): $(FULLCHAIN) $(CERT) $(KEY)
+	lbu add $(CERT_PATH)
+	lbu commit
+
+###############################################################################
diff --git a/lb/acme_refresh/justfile b/lb/acme_refresh/justfile
new file mode 100755
index 0000000..457936e
--- /dev/null
+++ b/lb/acme_refresh/justfile
@@ -0,0 +1,7 @@
+dag := justfile_directory()
+
+run:
+    make --directory "{{dag}}"
+
+render:
+    make --file ../../common/render-dag.make
diff --git a/lb/acme_refresh/run.sh b/lb/acme_refresh/run.sh
new file mode 100755
index 0000000..09c0c63
--- /dev/null
+++ b/lb/acme_refresh/run.sh
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+DAG=$(dirname "$0")
+make -C "$DAG"