diff --git a/Dockerfile b/Dockerfile
index 452e526..6a13781 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -19,6 +19,7 @@ RUN cargo build --release --bin atuin
 FROM debian:bullseye-20230227-slim AS runtime
 
 RUN useradd -c 'atuin user' atuin && mkdir /config && chown atuin:atuin /config
+RUN apt update && apt install ca-certificates # so that webhooks work
 WORKDIR app
 
 USER atuin