From 2df2310926f07914eb785da0c38567ab4f4f533f Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Mon, 11 Dec 2023 21:52:47 +0000
Subject: [PATCH] Update postgres permissions

---
 hosts/linode/postgres.nix | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/hosts/linode/postgres.nix b/hosts/linode/postgres.nix
index 14beb7e..2677ba5 100644
--- a/hosts/linode/postgres.nix
+++ b/hosts/linode/postgres.nix
@@ -17,19 +17,16 @@
 		#'';  # These are done manually in order to set the LC_COLLATE values properly
 		ensureUsers = [ {
 			name = "nextcloud";
-			ensurePermissions."DATABASE nextcloud" = "ALL PRIVILEGES";
-		} {
-			name = "root";
-			ensurePermissions."ALL TABLES IN SCHEMA public" = "ALL PRIVILEGES";
+			ensureDBOwnership = true;
 		} {
 			name = "gitea";
-			ensurePermissions."DATABASE gitea" = "ALL PRIVILEGES";
+			ensureDBOwnership = true;
 		} {
 			name = "dendrite";
-			ensurePermissions."DATABASE dendrite" = "ALL PRIVILEGES";
+			ensureDBOwnership = true;
 		} {
 			name = "monica";
-			ensurePermissions."DATABASE monica" = "ALL PRIVILEGES";
+			ensureDBOwnership = true;
 		} ];
 		settings = {
 			log_connections = true;