fix(deploy): add integration stack with SELinux-compatible mounts

2026-09-18 15:35:20 +08:00
parent 9909dbd7e0
commit abf598a250
7 changed files with 323 additions and 0 deletions
@@ -0,0 +1,7 @@
+-- 仅在新建的本地联调数据库中执行；不生成未定稿的参考数据结构。
+CREATE ROLE admin_reader LOGIN PASSWORD 'admin_reader_dev_pass';
+GRANT CONNECT ON DATABASE msgx TO admin_reader;
+GRANT USAGE ON SCHEMA public TO admin_reader;
+-- Flyway 使用 msgx_dev 创建对象；只读权限随新表和视图生效。
+ALTER DEFAULT PRIVILEGES FOR ROLE msgx_dev IN SCHEMA public
+  GRANT SELECT ON TABLES TO admin_reader;