diff --git a/Dockerfile b/Dockerfile
index f0a1e4d..2d2bc85 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -8,6 +8,11 @@ RUN go mod download
 COPY . .
 RUN CGO_ENABLED=0 go build -buildvcs=false ./cmd/mc-router
 
-FROM gcr.io/distroless/static-debian12
+FROM alpine AS certs
+RUN apk add -U \
+    ca-certificates
+
+FROM scratch
 ENTRYPOINT ["/mc-router"]
+COPY --from=certs /etc/ssl/certs/ /etc/ssl/certs
 COPY --from=builder /build/mc-router /mc-router
diff --git a/Dockerfile.release b/Dockerfile.release
index 0c9db45..cc1952b 100644
--- a/Dockerfile.release
+++ b/Dockerfile.release
@@ -1,8 +1,13 @@
-FROM gcr.io/distroless/static-debian12
+FROM alpine AS certs
+RUN apk add -U \
+    ca-certificates
+
+FROM scratch
 
 LABEL org.opencontainers.image.authors="Geoff Bourne <itzgeoff@gmail.com>"
 LABEL org.opencontainers.image.title="mc-router"
 LABEL org.opencontainers.image.source="https://github.com/itzg/mc-router"
 
+COPY --from=certs /etc/ssl/certs/ /etc/ssl/certs
 COPY mc-router /
 ENTRYPOINT ["/mc-router"]