diff --git a/security/renew-ssl.sh b/security/renew-ssl.sh
new file mode 100644
index 0000000..6a91cab
--- /dev/null
+++ b/security/renew-ssl.sh
@@ -0,0 +1,6 @@
+acme.sh --issue -d pikami.org -d mail.pikami.org --webroot /var/www/html/ --force
+acme.sh --install-cert -d pikami.org \
+  --key-file       /etc/ssl/private/domain.key \
+  --fullchain-file /etc/ssl/certs/chained.pem
+cp /etc/ssl/certs/chained.pem /etc/postfix/chained.pem
+cp /etc/ssl/private/domain.key /etc/postfix/domain.key