bounca/example/init/vault-database

11 lines
351 B
Bash
Executable File

#!/bin/sh
set -euo pipefailvault write database/roles/bounca \
db_name="postgres" \
creation_statements="CREATE ROLE \"{{name}}\" WITH LOGIN PASSWORD '{{password}}' VALID UNTIL '{{expiration}}'; \
GRANT \"bounca\" TO \"{{name}}\"; \
ALTER ROLE \"{{name}}\" SET role = \"bounca\"" \
default_ttl="12h" \
max_ttl="720h"