DONE: add sectigo certs to docker container

docker/php/Dockerfile

@@ -2,7 +2,15 @@ FROM php:7.4-fpm AS base
 
 WORKDIR /var/www/html
 
-RUN apt-get update \
+# Debian 11 (bullseye) is EOL; deb.debian.org returns 404 for security debs.
+RUN printf '%s\n' \
+  'deb http://archive.debian.org/debian bullseye main' \
+  'deb http://archive.debian.org/debian-security bullseye-security main' \
+  'deb http://archive.debian.org/debian bullseye-updates main' \
+  > /etc/apt/sources.list \
+  && printf 'Acquire::Check-Valid-Until "false";\n' \
+  > /etc/apt/apt.conf.d/99no-check-valid-until \
+  && apt-get update \
   && apt-get install -y --no-install-recommends \
   git \
   pkg-config \
@@ -27,8 +35,10 @@ COPY --from=composer:2 /usr/bin/composer /usr/local/bin/composer
 COPY docker/php/php.ini /usr/local/etc/php/conf.d/app.ini
 COPY docker/php/zz-clear-env.conf /usr/local/etc/php-fpm.d/zz-clear-env.conf
 COPY docker/php/entrypoint.sh /usr/local/bin/app-entrypoint.sh
+COPY docker/php/certs/*.crt /usr/local/share/ca-certificates/
 
-RUN chmod +x /usr/local/bin/app-entrypoint.sh \
+RUN update-ca-certificates \
+  && chmod +x /usr/local/bin/app-entrypoint.sh \
   && usermod -u 1000 www-data && groupmod -g 1000 www-data
 
 ENTRYPOINT ["app-entrypoint.sh"]