[Unit]
Description=Update local time over HTTPS
After=network.target nss-lookup.target
Before=time-sync.target
Wants=time-sync.target

[Service]
Type=oneshot
ExecStart=/usr/bin/tlsdate -l -H www.google.com -C /etc/ssl/certs
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target