diff --git a/defaults/main.yml b/defaults/main.yml
index 2abd930..f192bfe 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -65,6 +65,7 @@ freshrss_extensions_enabled:
   - "Tumblr-GDPR"
 
 freshrss_postgres_ssl_mode: disable
+freshrss_postgres_ssl_rootcert: /etc/ssl/certs/ca-certificates.crt
 freshrss_postgres_server: "{{ inventory_hostname }}"
 freshrss_postgres_port: 5432
 freshrss_postgres_superuser: postgres
diff --git a/templates/services/freshrss-compose.yml.j2 b/templates/services/freshrss-compose.yml.j2
index 7fba0cc..d8c8998 100644
--- a/templates/services/freshrss-compose.yml.j2
+++ b/templates/services/freshrss-compose.yml.j2
@@ -70,6 +70,7 @@ services:
       {% endif %}
       - FRESHRSS_DB_TYPE=pgsql
       - FRESHRSS_DB_HOST={{ freshrss_postgres_server }};sslmode={{ freshrss_postgres_ssl_mode }}
+      - FRESHRSS_POSTGRES_SSL_ROOTCERT={{ freshrss_postgres_ssl_rootcert }}
       - FRESHRSS_DB_PORT={{ freshrss_postgres_port }}
       - FRESHRSS_DB_USER={{ freshrss_postgres_user.name }}
       - FRESHRSS_DB_PASSWORD={{ freshrss_postgres_user.password }}