[enh] container: custom certificates (#5238)

Let container instance administrators to add custom certificates:

  https://docs.searxng.org/admin/installation-docker.html#custom-certificates

Closes https://github.com/searxng/searxng/issues/5206

container/base-builder.yml

@@ -16,6 +16,7 @@ work-dir: /usr/local/searxng/
 
 environment:
   PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+  SSL_CERT_DIR: /etc/ssl/certs
   SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt
   HISTFILE: /dev/null
 

container/base.yml

@@ -3,6 +3,7 @@ contents:
     - https://dl-cdn.alpinelinux.org/alpine/edge/main
   packages:
     - alpine-baselayout
+    - ca-certificates
     - ca-certificates-bundle
     - musl-locales
     - musl-locales-lang
@@ -27,6 +28,7 @@ accounts:
 
 environment:
   PATH: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+  SSL_CERT_DIR: /etc/ssl/certs
   SSL_CERT_FILE: /etc/ssl/certs/ca-certificates.crt
   HISTFILE: /dev/null
   CONFIG_PATH: /etc/searxng

container/entrypoint.sh

@@ -127,4 +127,6 @@ volume_handler "$DATA_PATH"
 # Check for files
 config_handler "$SEARXNG_SETTINGS_PATH" "/usr/local/searxng/searx/settings.yml"
 
+update-ca-certificates
+
 exec /usr/local/searxng/.venv/bin/granian searx.webapp:app