diff --git a/project/settings.py b/project/settings.py
index 95fed6109..de070e1f6 100644
--- a/project/settings.py
+++ b/project/settings.py
@@ -308,6 +308,7 @@ def split(string, delim):
 ELASTICSEARCH8_CERT_PATH = os.environ.get('ELASTICSEARCH8_CERT_PATH')
 ELASTICSEARCH8_USERNAME = os.environ.get('ELASTICSEARCH8_USERNAME', 'elastic')
 ELASTICSEARCH8_SECRET = os.environ.get('ELASTICSEARCH8_SECRET')
+ELASTICSEARCH8_ASSERT_HOSTNAME = os.environ.get('ELASTICSEARCH8_ASSERT_HOSTNAME')
 
 # Seconds, not an actual celery settings
 CELERY_RETRY_BACKOFF_BASE = int(os.environ.get('CELERY_RETRY_BACKOFF_BASE', 2 if DEBUG else 10))
diff --git a/share/search/index_strategy/elastic8.py b/share/search/index_strategy/elastic8.py
index ea4ea713b..bc4b30f2e 100644
--- a/share/search/index_strategy/elastic8.py
+++ b/share/search/index_strategy/elastic8.py
@@ -126,6 +126,7 @@ def _get_elastic8_client(cls) -> elasticsearch8.Elasticsearch:
         timeout = settings.ELASTICSEARCH['TIMEOUT']
         return elasticsearch8.Elasticsearch(
             hosts=settings.ELASTICSEARCH8_URL,
+            ssl_assert_hostname=settings.ELASTICSEARCH8_ASSERT_HOSTNAME,
             # security:
             ca_certs=settings.ELASTICSEARCH8_CERT_PATH,
             basic_auth=(