You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
13 lines
907 B
13 lines
907 B
#!/bin/sh |
|
set -eu |
|
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" --set=migration_password="$MIGRATION_PASSWORD" --set=runtime_password="$RUNTIME_PASSWORD" <<'SQL' |
|
CREATE ROLE gizmoduck_migrate LOGIN PASSWORD :'migration_password' NOSUPERUSER NOCREATEDB NOCREATEROLE; |
|
CREATE ROLE gizmoduck_app LOGIN PASSWORD :'runtime_password' NOSUPERUSER NOCREATEDB NOCREATEROLE; |
|
REVOKE ALL ON DATABASE gizmoduck FROM PUBLIC; |
|
GRANT CONNECT ON DATABASE gizmoduck TO gizmoduck_migrate, gizmoduck_app; |
|
REVOKE ALL ON SCHEMA public FROM PUBLIC; |
|
ALTER SCHEMA public OWNER TO gizmoduck_migrate; |
|
GRANT USAGE ON SCHEMA public TO gizmoduck_app; |
|
ALTER DEFAULT PRIVILEGES FOR ROLE gizmoduck_migrate IN SCHEMA public GRANT SELECT, INSERT, UPDATE, DELETE ON TABLES TO gizmoduck_app; |
|
ALTER DEFAULT PRIVILEGES FOR ROLE gizmoduck_migrate IN SCHEMA public GRANT USAGE, SELECT ON SEQUENCES TO gizmoduck_app; |
|
SQL
|
|
|