diff --git a/Dockerfile b/Dockerfile
index 8b432ad..86a13b1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -25,7 +25,7 @@ FROM base AS build
 # better-sqlite3's install step is `prebuild-install || node-gyp rebuild`, so a
 # toolchain has to exist for the fallback. It never reaches a runtime stage.
 RUN apt-get update \
- && apt-get install -y --no-install-recommends python3 make g++ \
+ && apt-get install -y --no-install-recommends python3 make g++ openssl \
  && rm -rf /var/lib/apt/lists/*
 
 # Manifests first: dependencies only reinstall when the lockfile actually moves.