try accepting self signed cert

.gitea/workflows/vault.yaml

@@ -38,6 +38,7 @@ jobs:
       - name: Auth with gitea for vault
         id: gitea_vault_jwt
         run: |
+          curl https://ssl-ca.arcodange.lab:8443/roots.pem -k > /usr/local/share/ca-certificates/arcodange-root.crt && update-ca-certificates
           echo -n "${{ secrets.vault_oauth__sh_b64 }}" | base64 -d | bash
 
   tofu:
@@ -49,6 +50,8 @@ jobs:
       OPENTOFU_VERSION: 1.8.2
       TERRAFORM_VAULT_AUTH_JWT: ${{ needs.gitea_vault_auth.outputs.gitea_vault_jwt }}
     steps:
+      - run: |
+          ls /usr/local/share/ca-certificates/arcodange-root.crt
       - *vault_step
       - uses: actions/checkout@v4
       - name: terraform apply