diff --git a/scripts/install.sh b/scripts/install.sh
index d7c7b9a..ea80e23 100644
--- a/scripts/install.sh
+++ b/scripts/install.sh
@@ -101,6 +101,11 @@ if [[ ! -f "/root/.acme.sh/${DOMAIN}_ecc/fullchain.cer" ]]; then
   /root/.acme.sh/acme.sh --issue -d "$DOMAIN" -w /var/www/acme --force
 fi
 
+log "安装 TLS 证书到 sing-box ..."
+/root/.acme.sh/acme.sh --install-cert -d "$DOMAIN" \
+  --key-file /etc/sing-box/certs/privkey.pem \
+  --fullchain-file /etc/sing-box/certs/fullchain.pem
+
 log "生成 sing-box 服务端配置 ..."
 mkdir -p /etc/sing-box/certs
 sed -e "s|\${UUID}|${UUID}|g" \
@@ -134,7 +139,7 @@ UNIT
 systemctl daemon-reload
 systemctl enable sing-box
 
-log "安装 TLS 证书到 sing-box ..."
+log "注册证书续期 reload 命令 ..."
 /root/.acme.sh/acme.sh --install-cert -d "$DOMAIN" \
   --key-file /etc/sing-box/certs/privkey.pem \
   --fullchain-file /etc/sing-box/certs/fullchain.pem \