diff --git a/Dockerfile b/Dockerfile
index 1ffac8c..b0952e9 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.27.2-trixie AS golang
+FROM golang:1.27.3-trixie AS golang
 
 FROM golang AS yq
 ARG YQ_VERSION=v4.54.1
@@ -22,9 +22,13 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
       gettext-base gh git git-lfs jq less moreutils openssh-client openssl \
       procps python3 python3-pip python3-venv ripgrep rsync shellcheck \
       silversearcher-ag tini tmux tree unzip vim wget xz-utils zip zoxide zsh \
+    && apt-get install -y --no-install-recommends --only-upgrade ca-certificates \
     && rm -rf /var/lib/apt/lists/* \
     && ln -s /usr/bin/fdfind /usr/local/bin/fd
 
+ENV SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt \
+    NODE_OPTIONS="--use-openssl-ca${NODE_OPTIONS:+ $NODE_OPTIONS}"
+
 ARG OPENCODE_VERSION=2.0.32
 ARG OPENCHAMBER_VERSION=2.4.0
 ARG TYPESCRIPT_VERSION=7.0.2
@@ -63,8 +67,7 @@ ENV HOME=/data \
     XDG_CACHE_HOME=/data/.cache \
     OPENCODE_CONFIG=/etc/opencode/opencode.json \
     OPENCODE_CLIENT=app \
-    OPENCHAMBER_CHATS_DIR=/data/workspace/.chats \
-    SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt
+    OPENCHAMBER_CHATS_DIR=/data/workspace/.chats
 
 COPY --from=config /build/runtime.json /etc/opencode/opencode.json
 COPY AGENTS.md /etc/opencode/AGENTS.md