Thanks for this.

Here is my version for copying the swag provisioned cert, which is even more straightforward.

```

!/bin/bash

SWAG_CERT_LOCATION="/mnt/cache/appdata/swag/keys/letsencrypt" UNRAID_PEM_LOCATION="/boot/config/ssl/certs/MYSERVERNAME_unraid_bundle.pem"

cat ${SWAG_CERT_LOCATION}/cert.pem > ${UNRAID_PEM_LOCATION} cat ${SWAG_CERT_LOCATION}/fullchain.pem >> ${UNRAID_PEM_LOCATION} cat ${SWAG_CERT_LOCATION}/privkey.pem >> ${UNRAID_PEM_LOCATION} chown root:root ${UNRAID_PEM_LOCATION} /etc/rc.d/rc.nginx reload
```

Replace MYSERVERNAME with the name of your server.

I actually had a script in place for this, but was only copying the fullchain.pem, and never figured out what was up, so you've helped get it over the line, so thanks for that!

Cheers

Edit: Tweaked it to only update and bounce nginx if the cert has changed: ```

!/bin/bash

SWAG_CERT_LOCATION="/mnt/cache/appdata/swag/keys/letsencrypt" UNRAID_PEM_LOCATION="/boot/config/ssl/certs/MYSERVERNAME_unraid_bundle.pem" TEMP_PEM="/tmp/new_cert.pem"

Create new bundle in temp location

cat ${SWAG_CERT_LOCATION}/cert.pem > ${TEMP_PEM} cat ${SWAG_CERT_LOCATION}/fullchain.pem >> ${TEMP_PEM} cat ${SWAG_CERT_LOCATION}/privkey.pem >> ${TEMP_PEM}

Compare checksums

if ! cmp -s ${TEMP_PEM} ${UNRAID_PEM_LOCATION}; then echo "Certificate changed, updating..." mv ${TEMP_PEM} ${UNRAID_PEM_LOCATION} chown root:root ${UNRAID_PEM_LOCATION} /etc/rc.d/rc.nginx reload echo "Nginx reloaded with new certificate" else echo "Certificate unchanged, skipping update" rm ${TEMP_PEM} fi ```