Allow custom CA certificates for S3 backup helper containers

[sandroneuenfeldt]

The Coolify UI can successfully validate the S3 storage after adding our internal CA certificate to the main Coolify container.

However, database backups are uploaded by a separate, dynamically created coolify-helper container. This container does not inherit the custom CA trust configuration from the main Coolify container.

DatabaseBackupJob.php starts the helper through a direct docker run command. Only the backup directory is mounted into the container. There is currently no supported option to mount a custom CA bundle or pass a setting such as SSL_CERT_FILE or SSL_CERT_DIR.

As a result, the MinIO client inside the helper container fails while configuring the S3 alias:

Unable to initialize new alias from the provided credentials.
tls: failed to verify certificate:
x509: certificate signed by unknown authority

It would be helpful if Coolify provided a supported way to make custom CA certificates available to dynamically created backup helper containers, for example through:

• a configurable CA-bundle mount,
• propagation of SSL_CERT_FILE or SSL_CERT_DIR,
• or a global custom-CA configuration applied to all Coolify helper containers.

[ryou90]

I have the same problem.

It would be great if this feature were added :)
Right now, I'm using an internal proxy that runs over HTTP. That lets me bypass the SSL check. But it's more of a hacky solution.