The best way to do this would be to implement some sort of refresh mechanism, so when people actively use the site they stay logged in.

Maybe extend the expiration to 7 days if a user comes to the site and there’s less than 7 days left? Probably best to follow best practices here.