diff --git a/modules/server/containers/apps/invidious.nix b/modules/server/containers/apps/invidious.nix
index b30776f..b3fa5c5 100644
--- a/modules/server/containers/apps/invidious.nix
+++ b/modules/server/containers/apps/invidious.nix
@@ -11,9 +11,15 @@ let
   image = pkgs.dockerTools.streamLayeredImage {
     name = pkgs.invidious.name;
     tag = pkgs.invidious.version;
+
+    contents = [ pkgs.cacert patchedInvidious ];
     config = {
       Entrypoint = [ "${patchedInvidious}/bin/invidious" ];
       ExposedPorts = { "3000/tcp" = {}; };
+      Env = [ 
+        "SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+        "NIX_SSL_CERT_FILE=${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt"
+      ];
     };
   };
 
diff --git a/modules/server/containers/data/invidious/config.yml b/modules/server/containers/data/invidious/config.yml
index f411d54..52d3e56 100644
--- a/modules/server/containers/data/invidious/config.yml
+++ b/modules/server/containers/data/invidious/config.yml
@@ -15,7 +15,7 @@ port: 3000
 external_port: 443
 host_binding: 0.0.0.0
 domain: $INVIDIOUS_DOMAIN
-https_only: true
+https_only: false
 #hsts: true
 
 ## Accepted values: true, false, dash, livestreams, downloads, local
@@ -57,7 +57,7 @@ jobs:
 # -----------------------------
 
 #banner:
-use_pubsub_feeds: true
+# use_pubsub_feeds: true
 
 hmac_key: $HMAC_KEY
 #dmca_content: