Install certs in container.

Dockerfile

@@ -25,8 +25,14 @@ RUN npm ci --prefix assets && npm run deploy --prefix assets
 # now, build the application back in the elixir container
 FROM elixir-builder as app-builder
 
+RUN apt-get install --no-install-recommends --yes curl
+
 WORKDIR /root
 
+RUN curl https://truststore.pki.rds.amazonaws.com/global/global-bundle.pem \
+    -o aws-cert-bundle.pem
+RUN echo "d72191eaa5d48fe2b6e044a0ae0b0e9f35e325b34b1ecab6ffe11d490d5cdb8f  aws-cert-bundle.pem" | sha256sum -c -
+
 # add frontend assets compiled in node container, required by phx.digest
 COPY --from=assets-builder /root/priv/static ./priv/static
 
@@ -46,6 +52,7 @@ ENV MIX_ENV=prod TERM=xterm LANG="C.UTF-8" PORT=4000
 # add frontend assets with manifests from app build container
 COPY --from=app-builder /root/priv/static ./priv/static
 COPY --from=app-builder /root/_build/prod/rel/signs_ui .
+COPY --from=app-builder /root/aws-cert-bundle.pem ./priv/aws-cert-bundle.pem
 RUN mkdir gtfs
 
 # Healthcheck