diff --git a/llama-stack b/llama-stack
index 9ed580e..739b18e 160000
--- a/llama-stack
+++ b/llama-stack
@@ -1 +1 @@
-Subproject commit 9ed580e462eb7f9dca87ab98384b9b5b091c59c8
+Subproject commit 739b18edf8755390cd75b819852090de3be940c3
diff --git a/template.yaml b/template.yaml
index a9cbd56..d464598 100644
--- a/template.yaml
+++ b/template.yaml
@@ -314,6 +314,8 @@ objects:
               db: ${env.ASSISTED_CHAT_POSTGRES_NAME}
               user: ${env.ASSISTED_CHAT_POSTGRES_USER}
               password: ${env.ASSISTED_CHAT_POSTGRES_PASSWORD}
+              ssl_mode: "verify-full"
+              ca_cert_path: /etc/tls/ca-bundle.pem
             responses_store:
               type: postgres
               host: ${env.ASSISTED_CHAT_POSTGRES_HOST}
@@ -321,6 +323,8 @@ objects:
               db: ${env.ASSISTED_CHAT_POSTGRES_NAME}
               user: ${env.ASSISTED_CHAT_POSTGRES_USER}
               password: ${env.ASSISTED_CHAT_POSTGRES_PASSWORD}
+              ssl_mode: "verify-full"
+              ca_cert_path: /etc/tls/ca-bundle.pem
         telemetry:
         - provider_id: meta-reference
           provider_type: inline::meta-reference
@@ -354,6 +358,8 @@ objects:
         db: ${env.ASSISTED_CHAT_POSTGRES_NAME}
         user: ${env.ASSISTED_CHAT_POSTGRES_USER}
         password: ${env.ASSISTED_CHAT_POSTGRES_PASSWORD}
+        ssl_mode: "verify-full"
+        ca_cert_path: /etc/tls/ca-bundle.pem
       models:
       - metadata: {}
         model_id: ${LLAMA_STACK_2_0_FLASH_MODEL}