diff --git a/.github/workflows/ghaymah.yml b/.github/workflows/ghaymah.yml
index aa97677..174c031 100644
--- a/.github/workflows/ghaymah.yml
+++ b/.github/workflows/ghaymah.yml
@@ -4,12 +4,24 @@ jobs :
     steps:
       - name: checkout code
         uses: actions/checkout@v5.0.0
+
       - name: install ghaymah cli
         run: curl -sSl https://cli.ghaymah.systems/install.sh | bash
 
       - name: login to ghaymah
         run: $HOME/ghaymah/bin/gy auth login --email "${{secrets.GHAYMAH_EMAIL}}" --password "${{secrets.GHAYMAH_PW}}"
 
+      - name: Create env object with secrets
+        run: |
+          jq '.env = {
+            "SQL_CONN": "${{ secrets.SQL_CONN }}"
+          }' .ghaymah.json > /tmp/ghaymah.json && mv /tmp/ghaymah.json .ghaymah.json
+
+      - name: Inject SQL_CONN into config.yml.example
+        env:
+          SQL_CONN: ${{ secrets.SQL_CONN }}
+        run: |
+          sed -i "s|^db-uri: .*|db-uri: ${SQL_CONN}|" config.yml.example > /tmp/config.yml.example && mv /tmp/config.yml.example config.yml.example
+
       - name: deploy
         run: $HOME/ghaymah/bin/gy resource app launch
-
diff --git a/Dockerfile b/Dockerfile
index 8a6af25..aa81021 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -60,7 +60,7 @@ RUN addgroup -S opengist && \
 
 WORKDIR /app/opengist
 
-COPY --from=build --chown=opengist:opengist /opengist/config.yml /config.yml
+COPY --from=build --chown=opengist:opengist /opengist/config.yml.example /config.yml
 COPY --from=build --chown=opengist:opengist /opengist/opengist .
 COPY --from=build --chown=opengist:opengist /opengist/docker ./docker