bounca/example/init/vault-database

11 lines
351 B
Plaintext
Raw Permalink Normal View History

#!/bin/sh
2024-03-05 14:47:58 +01:00
set -euo pipefailvault write database/roles/bounca \
db_name="postgres" \
creation_statements="CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; \
GRANT \"bounca\" TO \"{{name}}\"; \
ALTER ROLE \"{{name}}\" SET role = \"bounca\"" \
default_ttl="12h" \
max_ttl="720h"