From 470b44b25c0377b7a65c2b4b483078d920c863f6 Mon Sep 17 00:00:00 2001
From: Roy Dumblauskas <roydumblauskas@gmail.com>
Date: Tue, 18 Nov 2025 23:40:30 -0600
Subject: [PATCH] create role, assign priveleges

---
 homelab-services/postgresql-db/flake.nix | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/homelab-services/postgresql-db/flake.nix b/homelab-services/postgresql-db/flake.nix
index 06dea34..faf229a 100644
--- a/homelab-services/postgresql-db/flake.nix
+++ b/homelab-services/postgresql-db/flake.nix
@@ -115,7 +115,18 @@
                 echo $dev_user_val
                 echo $dev_pass_val
 
-                echo "Bootstrapped DB ''${db} (user: ''${user_val})"
+                # Create databases
+                $psql_bin CREATE DATABASE "$db"
+                $psql_bin CREATE DATABASE "$db"_dev
+
+                # Create users if not exists
+                $psql-bin CREATE ROLE "$user_val" LOGIN PASSWORD "$pass_val"
+                $psql-bin CREATE ROLE "$dev_user_val" LOGIN PASSWORD "$dev_pass_val"
+
+                # Give users privileges on databases
+                $psql-bin GRANT ALL PRIVELEGES ON DATABASE "$db" TO "$user_val"
+                $psql-bin GRANT ALL PRIVELEGES ON DATABASE "$db"_dev TO "$dev_user_val"
+
               done
             '';
             };