docker compose update ca certificates