diff --git a/secrets/letsencrypt/ca.pem b/secrets/letsencrypt/ca.pem
new file mode 100644
index 0000000..0002462
--- /dev/null
+++ b/secrets/letsencrypt/ca.pem
@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/secrets/letsencrypt/redxen-secret-letsencrypt-fullchain.pre-install b/secrets/letsencrypt/redxen-secret-letsencrypt-fullchain.pre-install
new file mode 120000
index 0000000..e725812
--- /dev/null
+++ b/secrets/letsencrypt/redxen-secret-letsencrypt-fullchain.pre-install
@@ -0,0 +1 @@
+redxen-secret-letsencrypt.pre-install
\ No newline at end of file
diff --git a/secrets/letsencrypt/redxen-secret-letsencrypt-private.pre-install b/secrets/letsencrypt/redxen-secret-letsencrypt-private.pre-install
new file mode 120000
index 0000000..e725812
--- /dev/null
+++ b/secrets/letsencrypt/redxen-secret-letsencrypt-private.pre-install
@@ -0,0 +1 @@
+redxen-secret-letsencrypt.pre-install
\ No newline at end of file
diff --git a/secrets/letsencrypt/redxen-secret-letsencrypt.pre-install b/secrets/letsencrypt/redxen-secret-letsencrypt.pre-install
new file mode 100644
index 0000000..7fdf6d9
--- /dev/null
+++ b/secrets/letsencrypt/redxen-secret-letsencrypt.pre-install
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+addgroup -g 3005 -S rxletsenc 2>/dev/null
+
+return 0
diff --git a/secrets/selfsigned/redxen-secret-selfsigned-fullchain.pre-install b/secrets/selfsigned/redxen-secret-selfsigned-fullchain.pre-install
new file mode 120000
index 0000000..cf8825b
--- /dev/null
+++ b/secrets/selfsigned/redxen-secret-selfsigned-fullchain.pre-install
@@ -0,0 +1 @@
+redxen-secret-selfsigned.pre-install
\ No newline at end of file
diff --git a/secrets/selfsigned/redxen-secret-selfsigned-private.pre-install b/secrets/selfsigned/redxen-secret-selfsigned-private.pre-install
new file mode 120000
index 0000000..cf8825b
--- /dev/null
+++ b/secrets/selfsigned/redxen-secret-selfsigned-private.pre-install
@@ -0,0 +1 @@
+redxen-secret-selfsigned.pre-install
\ No newline at end of file
diff --git a/secrets/selfsigned/redxen-secret-selfsigned.pre-install b/secrets/selfsigned/redxen-secret-selfsigned.pre-install
new file mode 100644
index 0000000..a16a871
--- /dev/null
+++ b/secrets/selfsigned/redxen-secret-selfsigned.pre-install
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+addgroup -g 3000 -S rxselfsig 2>/dev/null
+
+return 0