diff --git a/flake.nix b/flake.nix
index c3a352fa..443bdc15 100644
--- a/flake.nix
+++ b/flake.nix
@@ -177,6 +177,9 @@
         pkgs.dockerTools.buildImage {
           name = package.pname;
           tag = "main";
+          copyToRoot = [
+            pkgs.dockerTools.caCertificates
+          ];
           config = {
             # Use the `tini` init system so that signals (e.g. ctrl+c/SIGINT)
             # are handled as expected