GitLab recently added CI_SERVER_TLS_CA_FILE to the docs, which was previously missing, but applicable to all GitLab versions.
CI_SERVER_TLS_CA_FILE