add path to ssl rootcert for postgres connections

defaults/main.yml

@@ -52,6 +52,7 @@ matrix_https_bind_port: 8448
 
 matrix_postgres_enabled: False
 matrix_postgres_ssl_mode: disable
+matrix_postgres_ssl_root_cert: /etc/pki/tls/certs/ca-bundle.trust.crt
 matrix_postgres_server: postgres.example.com
 matrix_postgres_port: 5432
 matrix_postgres_superuser: postgres

templates/opt/matrix/config/homeserver.yml.j2

@@ -218,6 +218,7 @@ database:
     host: {{ matrix_postgres_server }}
     port: {{ matrix_postgres_port }}
     sslmode: {{ matrix_postgres_ssl_mode }}
+    sslrootcert: {{ matrix_postgres_ssl_root_cert }}
     cp_min: 5
     cp_max: 10
   {% else %}