diff --git a/kube/deploy/apps/joplin/app/hr.yaml b/kube/deploy/apps/joplin/app/hr.yaml
index 2c79520e..1946a643 100644
--- a/kube/deploy/apps/joplin/app/hr.yaml
+++ b/kube/deploy/apps/joplin/app/hr.yaml
@@ -36,6 +36,7 @@ spec:
       APP_PORT: "22300"
       APP_BASE_URL: "https://${APP_DNS_JOPLIN}"
       DB_CLIENT: "pg"
+      NODE_TLS_REJECT_UNAUTHORIZED: "0" # for Postgres SSL # TODO: find out how to load Postgres CA to container's trust store
       POSTGRES_CONNECTION_STRING:
         valueFrom:
           secretKeyRef: