[Unit]
Description=Watch SSH Host certificates for renewal
After=sshd.service

[Path]
PathChanged=/etc/ssh/ssh_host_rsa_key-cert.pub
PathChanged=/etc/ssh/ssh_host_ecdsa_key-cert.pub
PathChanged=/etc/ssh/ssh_host_ed25519-cert.pub

[Install]
WantedBy=paths.target