diff --git a/gmi/docker/genkey.sh b/gmi/docker/genkey.sh
index accf371..453184c 100755
--- a/gmi/docker/genkey.sh
+++ b/gmi/docker/genkey.sh
@@ -1,12 +1,13 @@
 #! /bin/sh
 
-if test -f /etc/ssl/gmid.pem; then
+if test -f /ssl/gmid.pem; then
     echo "OK certificate exists"
 else
     echo "generating certificate..."
-    apk add libressl
+    mkdir /ssl
+    apk add --no-cache libressl
     libressl req -x509 -newkey rsa:4096 -nodes \
-        -keyout /etc/ssl/private/gmid.key \
-        -out /etc/ssl/gmid.pem \
+        -keyout /ssl/private/gmid.key \
+        -out /ssl/gmid.pem \
         -days 365 -subj "/CN=$GEMINI_HOST"
 fi
diff --git a/gmi/docker/gmid.conf b/gmi/docker/gmid.conf
index 8fe9fe3..3302845 100644
--- a/gmi/docker/gmid.conf
+++ b/gmi/docker/gmid.conf
@@ -1,6 +1,6 @@
 server $gem_host {
-    cert "/etc/ssl/gmid.pem"
-    key "/etc/ssl/private/gmid.key"
+    cert "/ssl/gmid.pem"
+    key "/ssl/private/gmid.key"
     root "/dongdigua.github.io"
 
     cgi "/cgi/*"