# Baking the APPLEBEE-ROOT26 root(s) into a container image.
#
# Copy applebee-root26-roots.pem next to your Dockerfile first.

# ── Debian / Ubuntu base ──
COPY applebee-root26-roots.pem /usr/local/share/ca-certificates/applebee-root26-roots.crt
RUN update-ca-certificates

# ── Alpine base ──
# RUN apk add --no-cache ca-certificates
# COPY applebee-root26-roots.pem /usr/local/share/ca-certificates/applebee-root26-roots.crt
# RUN update-ca-certificates

# ── RHEL / Fedora / UBI base ──
# COPY applebee-root26-roots.pem /etc/pki/ca-trust/source/anchors/applebee-root26-roots.crt
# RUN update-ca-trust extract

# ── Language runtimes that carry their own bundle ──
# Python requests/httpx:  ENV REQUESTS_CA_BUNDLE=/etc/ssl/certs/ca-certificates.crt
# Node.js:                ENV NODE_EXTRA_CA_CERTS=/usr/local/share/ca-certificates/applebee-root26-roots.crt
# Go:                     uses the system store; nothing extra needed.