docker compose run update ca certificates