* +pulumi * add ca-certs * move env vars around --------- Co-authored-by: Jacob Heider <jacob@tea.xyz>