build a template website

db/init/02-roles.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+# Runs once, on first start of an empty database volume.
+set -e
+psql -v ON_ERROR_STOP=1 -U "$POSTGRES_USER" -d "$POSTGRES_DB" <<SQL
+CREATE ROLE tracker_rw LOGIN PASSWORD '$TRACKER_PASSWORD';
+GRANT CONNECT ON DATABASE "$POSTGRES_DB" TO tracker_rw;
+GRANT USAGE ON SCHEMA public TO tracker_rw;
+GRANT INSERT ON visits, clicks TO tracker_rw;
+GRANT USAGE ON SEQUENCE visits_id_seq, clicks_id_seq TO tracker_rw;
+GRANT SELECT, INSERT, UPDATE ON link_health TO tracker_rw;
+
+CREATE ROLE stats_ro LOGIN PASSWORD '$STATS_RO_PASSWORD';
+ALTER ROLE stats_ro SET default_transaction_read_only = on;
+GRANT CONNECT ON DATABASE "$POSTGRES_DB" TO stats_ro;
+GRANT USAGE ON SCHEMA public TO stats_ro;
+GRANT SELECT ON ALL TABLES IN SCHEMA public TO stats_ro;
+ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO stats_ro;
+SQL