Pulling SSL certificates to HassOS

Hi!

I’m looking into a solution that will allow me to periodically pull the SSL certificates from another host and apply them to Home Assistant.

So far, for the pull method, I considered adding a crontab entry that will execute an SCP command with auth-key as a login method. Are there better methods to achieve this?

I assume, I’ll have to add the folowint to my configuration.yaml, is this correct?

http:
  base_url: https://hass.example.org
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

Now - how to I apply the certs? Should I add the ha core restart to crontab, or is there a better way?

Will my crontab entry persist between HassOS updates?