diff --git a/Dockerfile b/Dockerfile
index 5a49514..b92bd2e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -10,9 +10,10 @@ ENV PNPM_HOME="/pnpm"
 ENV PATH="$PNPM_HOME:$PATH"
 ENV HOME="/app"
 
-# Install required system packages and pnpm, then clean up the apt cache for a smaller image
-# ca-certificates: enables TLS/SSL for securely fetching dependencies and calling HTTPS services
-# --no-install-recommends keeps the image minimal
+# Install ca-certificates (the system CA bundle used for TLS), then clean
+# the apt cache. Required by the LiveKit SDK: the native Rust core reads
+# the system trust store at runtime, which the slim base image doesn't ship.
+# --no-install-recommends keeps the image minimal.
 RUN apt-get update -qq && apt-get install --no-install-recommends -y ca-certificates && rm -rf /var/lib/apt/lists/*
 
 # Pin pnpm version for reproducible builds