From 877cdab24eef4d13e4e694780c217758d1985f6f Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 11 Mar 2026 16:08:34 +0000
Subject: [PATCH 1/3] Initial plan


From c69ebc268a862515c953fe774a372dca0949ad94 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 11 Mar 2026 16:10:12 +0000
Subject: [PATCH 2/3] Source INSTANCE_UNIX_SOCKET, DB_USER, DB_NAME from
 secrets in apphosting.yaml

Co-authored-by: taterhead247 <26818765+taterhead247@users.noreply.github.com>
---
 .env.example    | 2 ++
 apphosting.yaml | 6 +++---
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.env.example b/.env.example
index 890f158..74acf4d 100644
--- a/.env.example
+++ b/.env.example
@@ -2,7 +2,9 @@ DATABASE_URL=postgres://postgres:postgres@127.0.0.1:5432/postgres
 
 # Cloud SQL Auth Proxy (Unix socket) — set these instead of DATABASE_URL on Cloud Run.
 # INSTANCE_UNIX_SOCKET=/cloudsql/PROJECT:REGION:INSTANCE
+# DB_USER=your_db_user
 # DB_PASSWORD=****
+# DB_NAME=your_db_name
 # DB_USE_UNIX_SOCKET=true  # set to "false" to force DATABASE_URL even when INSTANCE_UNIX_SOCKET is set
 
 # `openssl rand -hex 32`
diff --git a/apphosting.yaml b/apphosting.yaml
index ec5f4dc..a97ea56 100644
--- a/apphosting.yaml
+++ b/apphosting.yaml
@@ -63,11 +63,11 @@ env:
   # Cloud SQL Auth Proxy (Unix socket) connection.
   # Set INSTANCE_UNIX_SOCKET to enable; set DB_USE_UNIX_SOCKET=false to force DATABASE_URL fallback.
   - variable: INSTANCE_UNIX_SOCKET
-    value: /cloudsql/f3data:us-central1:f3data
+    secret: codex-instance-unix-socket
     availability:
       - RUNTIME
   - variable: DB_USER
-    value: app_codex
+    secret: codex-db-user
     availability:
       - RUNTIME
   - variable: DB_PASSWORD
@@ -75,6 +75,6 @@ env:
     availability:
       - RUNTIME
   - variable: DB_NAME
-    value: f3_prod
+    secret: codex-db-name
     availability:
       - RUNTIME

From c259c7b82f2b762b43baa0f1755ecc38473df765 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 12 Mar 2026 03:26:51 +0000
Subject: [PATCH 3/3] Use value: for INSTANCE_UNIX_SOCKET, DB_USER, DB_NAME
 (free env vars)

Co-authored-by: taterhead247 <26818765+taterhead247@users.noreply.github.com>
---
 apphosting.yaml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/apphosting.yaml b/apphosting.yaml
index a97ea56..ec5f4dc 100644
--- a/apphosting.yaml
+++ b/apphosting.yaml
@@ -63,11 +63,11 @@ env:
   # Cloud SQL Auth Proxy (Unix socket) connection.
   # Set INSTANCE_UNIX_SOCKET to enable; set DB_USE_UNIX_SOCKET=false to force DATABASE_URL fallback.
   - variable: INSTANCE_UNIX_SOCKET
-    secret: codex-instance-unix-socket
+    value: /cloudsql/f3data:us-central1:f3data
     availability:
       - RUNTIME
   - variable: DB_USER
-    secret: codex-db-user
+    value: app_codex
     availability:
       - RUNTIME
   - variable: DB_PASSWORD
@@ -75,6 +75,6 @@ env:
     availability:
       - RUNTIME
   - variable: DB_NAME
-    secret: codex-db-name
+    value: f3_prod
     availability:
       - RUNTIME