fix ca export & mount

deploy/stack/docker-compose.yml

@@ -160,6 +160,8 @@ services:
       KEYCLOAK_WEB_URL: ${KEYCLOAK_WEB_URL:-}
       TRINO_URL: ${TRINO_URL:-}
       TRINO_WEB_URL: ${TRINO_WEB_URL:-}
+      # CA Trino (file di host, dibuat scripts/export-trino-ca.sh) → dilihat panel.
+      TRINO_CA_FILE: ${TRINO_CA_FILE:-/app/.ca/trino.crt}
       NESSIE_URL: ${NESSIE_URL:-}
       AIRFLOW_URL: ${AIRFLOW_URL:-}
       STARROCKS_HOST: ${STARROCKS_HOST:-}
@@ -173,6 +175,8 @@ services:
       SICABE_STATE_FILE: data/state.json
     volumes:
       - panel-data:/app/data
+      # CA Trino: direktori host berisi trino.crt → /app/.ca (read-only).
+      - ${TRINO_CA_DIR:-../../.ca}:/app/.ca:ro
     restart: unless-stopped
     logging:
       driver: json-file