feat: restrict access to postgres socket

netoik-db.spec

@@ -34,7 +34,8 @@ systemctl restart postgresql.service
 # Create databases and users from DB_USERS variable (separator is ",") if not existing
 IFS="," read -ra users <<< "$DB_USERS";
 for user in "${users[@]}"; do
-  if ! runuser --user=postgres -- psql --quiet --tuples-only --command='\du' | grep --invert-match postgres | grep --quiet "$user"; then
+  usermod --append --groups postgres "$user";
+  if ! runuser --user=postgres -- psql --quiet --tuples-only --command='\du' | grep --quiet "$user"; then
     runuser --user=postgres -- createuser "$user"
     runuser --user=postgres -- createdb --owner="$user" "$user"
   fi
@@ -50,4 +51,3 @@ done
 
 %changelog
 %autochangelog
-