systemctl stop certbot.timer systemctl disable certbot.timer And to be sure that in case a new debian certbot update doesn't activatecertbot.timeragain you could mask thecertbot.timer. systemctl mask certbot.timer https://community.letsencrypt.org/t/certbot-creates-a-task-automatically-can-it-be-prevented/182730/2
systemctl list-timers