mcaptcha: replace ensurePermissions

Towards #126
ngi-nix · Feb 14, 2024 · dce3fcf · dce3fcf
1 parent 7c20b94
commit dce3fcf
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/modules/mcaptcha.nix b/modules/mcaptcha.nix
@@ -262,11 +262,14 @@ in {
       ensureUsers = [
         {
           name = cfg.user;
-          ensurePermissions = {"DATABASE ${cfg.settings.database.name}" = "ALL PRIVILEGES";};
         }
       ];
     };
 
+    systemd.services.postgresql.postStart = lib.mkIf cfg.database.createLocally (lib.mkAfter ''
+      $PSQL ${cfg.settings.database.name} -c 'GRANT ALL PRIVILEGES ON SCHEMA public TO "${cfg.user}"'
+    '');
+
     services.redis.servers.mcaptcha = lib.mkIf cfg.redis.createLocally {
       enable = true;
       port = cfg.redis.port;