From 86e947efb061145b363743fad13781e8fad606cc Mon Sep 17 00:00:00 2001
From: mguschin <gn.mikle@gmail.com>
Date: Sun, 1 Mar 2026 20:29:58 +0300
Subject: [PATCH] Add ca-certificates to fix s2s TLS verification

Without CA certs, Prosody cannot verify remote servers' certificates,
causing all server-to-server connections to fail with "not trusted".

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 Dockerfile | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Dockerfile b/Dockerfile
index 9d404ef..ba432a9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,6 +8,7 @@ RUN apt-get update --fix-missing && \
     lua-sec \
     lua-unbound \
     openssl \
+    ca-certificates \
     netcat-traditional \
     && rm -rf /var/lib/apt/lists/*