Trust mkcert CA in containers

[kesselb]

For debugging federation, it would be nice to trust the mkcert CA also in the containers.

• Get the ca path: mkcert -CAROOT
• Copy the root ca to our work directory
• Mount rootCA.pem to /usr/local/share/ca-certificates/rootCA.crt
• Run update-ca-certificates as root

Leaving it here as an idea. I trusted the certificates manually for now.

[juliushaertl]

Alternative for scripting could be

cp $(mkcert -CAROOT) data/shared/
docker-compose exec stable24 occ security:certificates:import /shared/rootCA.pem