Jeffrey Smith
680ec3b897
All checks were successful
Co-authored-by: Jeffrey Smith <jasafpro@gmail.com> Co-committed-by: Jeffrey Smith <jasafpro@gmail.com>
62 lines
2.7 KiB
Bash
62 lines
2.7 KiB
Bash
#!/bin/bash
|
|
# ============================================
|
|
# Armature - Database Bootstrap
|
|
# ============================================
|
|
# Idempotent: safe to run on every CI build.
|
|
# Creates the app role and database if they
|
|
# don't exist. Runs as the Postgres superuser.
|
|
#
|
|
# Required env vars:
|
|
# PGHOST, PGPORT, PGUSER, PGPASSWORD — admin connection
|
|
# APP_USER, APP_PASSWORD — app-level credentials
|
|
# DB_NAME — target database name
|
|
# ============================================
|
|
|
|
set -euo pipefail
|
|
|
|
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
|
echo "Database bootstrap: ${DB_NAME}"
|
|
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
|
|
|
# ── 1. Create role if not exists ─────────────
|
|
ROLE_EXISTS=$(psql -tAc "SELECT 1 FROM pg_roles WHERE rolname = '${APP_USER}';" postgres)
|
|
|
|
if [[ "${ROLE_EXISTS}" == "1" ]]; then
|
|
echo "✓ Role '${APP_USER}' already exists"
|
|
# Update password in case it changed
|
|
psql -c "ALTER ROLE ${APP_USER} WITH PASSWORD '${APP_PASSWORD}';" postgres
|
|
echo "✓ Password synced"
|
|
else
|
|
psql -c "CREATE ROLE ${APP_USER} WITH LOGIN PASSWORD '${APP_PASSWORD}';" postgres
|
|
echo "✓ Role '${APP_USER}' created"
|
|
fi
|
|
|
|
# ── 2. Create database if not exists ─────────
|
|
DB_EXISTS=$(psql -tAc "SELECT 1 FROM pg_database WHERE datname = '${DB_NAME}';" postgres)
|
|
|
|
if [[ "${DB_EXISTS}" == "1" ]]; then
|
|
echo "✓ Database '${DB_NAME}' already exists"
|
|
else
|
|
psql -c "CREATE DATABASE ${DB_NAME} OWNER ${APP_USER};" postgres
|
|
echo "✓ Database '${DB_NAME}' created"
|
|
fi
|
|
|
|
# ── 3. Ensure extensions (requires superuser) ─
|
|
psql -d "${DB_NAME}" <<'SQL'
|
|
CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
|
|
CREATE EXTENSION IF NOT EXISTS "pgcrypto";
|
|
CREATE EXTENSION IF NOT EXISTS "vector";
|
|
SQL
|
|
echo "✓ Extensions verified (uuid-ossp, pgcrypto, vector)"
|
|
|
|
# ── 4. Grant privileges ─────────────────────
|
|
psql -d "${DB_NAME}" -c "GRANT ALL PRIVILEGES ON DATABASE ${DB_NAME} TO ${APP_USER};"
|
|
psql -d "${DB_NAME}" -c "GRANT ALL PRIVILEGES ON SCHEMA public TO ${APP_USER};"
|
|
psql -d "${DB_NAME}" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO ${APP_USER};"
|
|
psql -d "${DB_NAME}" -c "ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO ${APP_USER};"
|
|
echo "✓ Privileges granted"
|
|
|
|
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|
|
echo "Bootstrap complete: ${DB_NAME}"
|
|
echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
|