diff --git a/entrypoint.sh b/entrypoint.sh
index aea00cd..3b1ffa7 100755
--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -44,10 +44,12 @@ KEY_PATH="/etc/prosody/certs/xmpp.guschin.info.key"
 LETSENCRYPT_CERT="/etc/prosody/certs/letsencrypt/fullchain.pem"
 LETSENCRYPT_KEY="/etc/prosody/certs/letsencrypt/privkey.pem"
 
-if [ -f "$LETSENCRYPT_CERT" ] && [ -f "$LETSENCRYPT_KEY" ]; then
+if [ -r "$LETSENCRYPT_CERT" ] && [ -r "$LETSENCRYPT_KEY" ]; then
     echo "Using Let's Encrypt certificate..."
-    ln -sf "$LETSENCRYPT_CERT" "$CERT_PATH"
-    ln -sf "$LETSENCRYPT_KEY" "$KEY_PATH"
+    cp "$LETSENCRYPT_CERT" "$CERT_PATH"
+    cp "$LETSENCRYPT_KEY" "$KEY_PATH"
+    chmod 644 "$CERT_PATH"
+    chmod 600 "$KEY_PATH"
 elif [ ! -f "$CERT_PATH" ] || [ ! -f "$KEY_PATH" ]; then
     echo "Let's Encrypt certificate not found, generating self-signed certificate..."
     openssl req -x509 -newkey rsa:4096 -keyout "$KEY_PATH" -out "$CERT_PATH" \