Debian/Ubuntu image already included a self-signed certificate.
docker run \
--rm \
-e POSTGRES_PASSWORD=password \
postgres:12 \
-c ssl=on \
-c ssl_cert_file=/etc/ssl/certs/ssl-cert-snakeoil.pem \
-c ssl_key_file=/etc/ssl/private/ssl-cert-snakeoil.key