feat: add db users

.gitea/workflows/ci.yaml

@@ -17,4 +17,4 @@ jobs:
       - name: Build tarball
         run: make tarball
       - name: Build rpm file
-        run: rpmbuild -ba %(make name).spec
+        run: rpmbuild -ba "$(make name).spec"

Makefile

@@ -30,9 +30,9 @@ build_arch:
 
 .PHONY: install
 install:
-	install --directory $(DESTDIR)$(RPM_SYSCONFDIR)/postgres $(DESTDIR)$(RPM_UNITDIR)/postgresql.service.d
+	install --mode=755 --directory $(DESTDIR)$(RPM_SYSCONFDIR)/postgres $(DESTDIR)$(RPM_UNITDIR)/postgresql.service.d
-	install --target-directory=$(DESTDIR)$(RPM_SYSCONFDIR)/postgres files/postgres/postgresql.conf files/postgres/pg_hba.conf
+	install --mode=644 --target-directory=$(DESTDIR)$(RPM_SYSCONFDIR)/postgres files/postgres/postgresql.conf files/postgres/pg_hba.conf
-	install --target-directory=$(DESTDIR)$(RPM_UNITDIR)/postgresql.service.d filrs/systemd/postgres.conf
+	install --mode=644 --target-directory=$(DESTDIR)$(RPM_UNITDIR)/postgresql.service.d files/systemd/postgres.conf
 
 $(RPM_TARBALL_PATH): *
 	git archive --format=tar.gz \

files/postgres/postgresql.conf

@@ -17,3 +17,13 @@ hba_file = "/etc/postgres/pg_hba.conf"
 # Empty listen addresses to disable listening via TCP/IP
 # because we want only uni socket connections
 listen_addresses = ""
+
+
+#-------------------------------------------------------------------------------
+# REPORTING AND LOGGING
+# Please refer to official doc before editing this section:
+# https://www.postgresql.org/docs/current/runtime-config-logging.html
+#-------------------------------------------------------------------------------
+
+# Redirect logs to stderr to be managed by journald
+log_destination = "stderr"

netoik-db.spec

@@ -22,6 +22,15 @@ Install the database management system called postgresql with a predefined confi
 %make_install
 
 %post
+# Create databases and users from DB_USERS variable (separator is ",") if not existing
+IFS="," read -ra users <<<"$DB_USERS";
+for user in "${users[@]}"; do
+  if ! runuser --user=postgres -- psql --quiet --tuples-only --command='\du' | grep --invert-match postgres | grep --quiet "$user"; then
+    runuser --user=postgres -- createuser "$user"
+    runuser --user=postgres -- createdb --owner="$user" "$user"
+  fi
+done 
+
 # Restart services
 systemctl daemon-reload
 systemctl reenable --now postgresql.service