diff --git a/defaults/main.yml b/defaults/main.yml
index 5cde2bb..a8010b3 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -63,5 +63,5 @@ unifi_nginx_vhost_symlink: /etc/nginx/sites-enabled
 unifi_nginx_iptables_enabled: False
 
 unifi_nginx_tls_enabled: True
-unifi_nginx_tls_cert_file: /etc/pki/tls/certs/mycert.pem
-unifi_nginx_tls_key_file: /etc/pki/tls/private/mykey.pem
+unifi_nginx_tls_cert_file: mycert.pem
+unifi_nginx_tls_key_file: mykey.pem
diff --git a/tasks/nginx.yml b/tasks/nginx.yml
index 7778cad..8d0ba2c 100644
--- a/tasks/nginx.yml
+++ b/tasks/nginx.yml
@@ -1,4 +1,35 @@
 ---
+- block:
+  - name: Copy certs and private key (content)
+    copy:
+      content: "{{ item.src }}"
+      dest: "{{ item.dest }}"
+      mode: "{{ item.mode }}"
+    with_items:
+      - { src: "{{ unifi_tls_key_source }}", dest: '/etc/pki/tls/private/{{ unifi_nginx_tls_key_file }}', mode: '0600' }
+      - { src: "{{ unifi_tls_cert_source }}", dest: '/etc/pki/tls/certs/{{ unifi_nginx_tls_cert_file }}', mode: '0750' }
+    loop_control:
+      label: "{{ item.dest }}"
+    notify: __nginx_reload
+    when: unifi_tls_source_use_content
+
+  - name: Copy certs and private key (files)
+    copy:
+      src: "{{ item.src }}"
+      dest: "{{ item.dest }}"
+      mode: "{{ item.mode }}"
+    with_items:
+      - { src: "{{ unifi_tls_key_source }}", dest: '{{ unifi_tls_key_file }}', mode: '0600' }
+      - { src: "{{ unifi_tls_cert_source }}", dest: '{{ unifi_tls_cert_file }}', mode: '0750' }
+    loop_control:
+      label: "{{ item.dest }}"
+    notify: __nginx_reload
+    when: unifi_tls_source_use_files
+  delegate_to: "{{ unifi_nginx_server }}"
+  when: unifi_nginx_tls_enabled
+  become: True
+  become_user: root
+
 - block:
   - name: Add vhost configuration file
     template: