diff --git a/playbooks/galaxy.yaml b/playbooks/galaxy.yaml
index f59d196a..64979469 100644
--- a/playbooks/galaxy.yaml
+++ b/playbooks/galaxy.yaml
@@ -24,6 +24,7 @@
           CONN_MAX_AGE: 0
           OPTIONS:
             sslmode: '{{ postgres_sslmode }}'
+            sslrootcert: "{{'/etc/pki/tls/certs/ca-bundle.crt' if (postgres_sslmode in ['verify-ca', 'verify-full'])}}"
       static_root: /app/galaxy_ng/app/static/
       redis_host: "{{ ansible_operator_meta.name }}-redis-svc"
       redis_port: 6379