need to install ca-certificates

otherwise SSL doesn't work in the container and you can't successfully do `CREATE EXTENSION postgis;` after you create a db