diff --git a/modules/graphdb/templates/03_gdb_conf_overrides.sh.tpl b/modules/graphdb/templates/03_gdb_conf_overrides.sh.tpl
index 1bf965e..83cc47a 100644
--- a/modules/graphdb/templates/03_gdb_conf_overrides.sh.tpl
+++ b/modules/graphdb/templates/03_gdb_conf_overrides.sh.tpl
@@ -79,7 +79,7 @@ if [[ $secrets == *"${graphdb_java_options_secret_name}"* ]]; then
   extra_graphdb_java_options=$(az appconfig kv show --endpoint "$APP_CONFIG_ENDPOINT" --auth-mode login --key ${graphdb_java_options_secret_name} | jq -r .value | base64 -d)
   (
     source /etc/graphdb/graphdb.env
-    echo "GDB_JAVA_OPTS=$GDB_JAVA_OPTS $extra_graphdb_java_options" >> /etc/graphdb/graphdb.env
+    echo "GDB_JAVA_OPTS=\"$GDB_JAVA_OPTS $extra_graphdb_java_options\"" >> /etc/graphdb/graphdb.env
   )
 fi