From 0c904f61b63295cbb57241350a485929661a54e3 Mon Sep 17 00:00:00 2001
From: jakeross <jirhiker@gmail.com>
Date: Fri, 27 Feb 2026 12:24:21 -0700
Subject: [PATCH] feat: update app.template.yaml to use block scalar for
 sensitive environment variables

---
 .github/app.template.yaml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/app.template.yaml b/.github/app.template.yaml
index 39e5d8a5..44df2f86 100644
--- a/.github/app.template.yaml
+++ b/.github/app.template.yaml
@@ -18,14 +18,17 @@ env_variables:
   PYGEOAPI_POSTGRES_USER: "${PYGEOAPI_POSTGRES_USER}"
   PYGEOAPI_POSTGRES_HOST: "${PYGEOAPI_POSTGRES_HOST}"
   PYGEOAPI_POSTGRES_PORT: "${PYGEOAPI_POSTGRES_PORT}"
-  PYGEOAPI_POSTGRES_PASSWORD: "${PYGEOAPI_POSTGRES_PASSWORD}"
+  PYGEOAPI_POSTGRES_PASSWORD: |-
+    ${PYGEOAPI_POSTGRES_PASSWORD}
   PYGEOAPI_SERVER_URL: "${PYGEOAPI_SERVER_URL}"
   CLOUD_SQL_IAM_AUTH: "${CLOUD_SQL_IAM_AUTH}"
-  GCS_SERVICE_ACCOUNT_KEY: "${GCS_SERVICE_ACCOUNT_KEY}"
+  GCS_SERVICE_ACCOUNT_KEY: |-
+    ${GCS_SERVICE_ACCOUNT_KEY}
   GCS_BUCKET_NAME: "${GCS_BUCKET_NAME}"
   AUTHENTIK_URL: "${AUTHENTIK_URL}"
   AUTHENTIK_CLIENT_ID: "${AUTHENTIK_CLIENT_ID}"
   AUTHENTIK_AUTHORIZE_URL: "${AUTHENTIK_AUTHORIZE_URL}"
   AUTHENTIK_TOKEN_URL: "${AUTHENTIK_TOKEN_URL}"
-  SESSION_SECRET_KEY: "${SESSION_SECRET_KEY}"
+  SESSION_SECRET_KEY: |-
+    ${SESSION_SECRET_KEY}
   APITALLY_CLIENT_ID: "${APITALLY_CLIENT_ID}"