diff --git a/apps/base/immich/release.yaml b/apps/base/immich/release.yaml
index ccd343634eff4fd9a9b6723d50b76966d11704d1..7f94e9d56456abd9c5e50f22cf5af1190a3d81e7 100644
--- a/apps/base/immich/release.yaml
+++ b/apps/base/immich/release.yaml
@@ -50,6 +50,7 @@ data:
       DB_DATABASE_NAME: immich
       PGSSLMODE: require
       PGSSLROOTCERT: /ca/ca.crt
+      NODE_EXTRA_CA_CERTS: /ca/ca.crt
     image:
       tag: v1.65.0
     immich:
@@ -64,14 +65,20 @@ data:
           enabled: true
           mountPath: /ca/
           type: secret
-          name: namespace-ca  
+          name: namespace-ca
+          items:
+          - key: ca.crt
+            path: ca.crt
     microservices:
       persistence:
         postgres-ca:
           enabled: true
           mountPath: /ca/
           type: secret
-          name: namespace-ca      
+          name: namespace-ca
+          items:
+          - key: ca.crt
+            path: ca.crt
     server:
       persistence:
         postgres-ca:
@@ -79,6 +86,9 @@ data:
           mountPath: /ca/
           type: secret
           name: namespace-ca
+          items:
+          - key: ca.crt
+            path: ca.crt
     redis:
       enabled: true
     typesense: