diff --git a/packages/create-app/templates/default-app/app-config.yaml.hbs b/packages/create-app/templates/default-app/app-config.yaml.hbs
index b9ed7955fb..870b071701 100644
--- a/packages/create-app/templates/default-app/app-config.yaml.hbs
+++ b/packages/create-app/templates/default-app/app-config.yaml.hbs
@@ -32,12 +32,10 @@ backend:
         $secret:
           env: POSTGRES_PASSWORD
       # https://node-postgres.com/features/ssl
-      ssl:
+      ssl: prefer # see https://www.postgresql.org/docs/current/libpq-ssl.html Table 33.1. SSL Mode Descriptions (e.g. require)
         #ca: # if you have a CA file and want to verify it you can uncomment this section
         #  $secret:
         #    file: <file-path>/ca/server.crt
-        $secret:
-          env: POSTGRES_SSL_OPTIONS # see https://www.postgresql.org/docs/current/libpq-ssl.html Table 33.1. SSL Mode Descriptions (e.g. POSTGRES_SSL_OPTIONS=require)
   {{/if}}
 
 proxy: