Fix inter-services communication

This commit is contained in:
2026-01-07 15:07:30 +03:00
Unverified
parent ef66025dba
commit 8ab5e4e071
17 changed files with 287 additions and 160 deletions
+9 -7
View File
@@ -2,13 +2,15 @@
-- This script creates dedicated users with limited privileges for each service
-- Create service-specific database roles with limited privileges
CREATE ROLE account_service_user LOGIN PASSWORD 'account_service_password';
CREATE ROLE profile_service_user LOGIN PASSWORD 'profile_service_password';
CREATE ROLE device_service_user LOGIN PASSWORD 'device_service_password';
CREATE ROLE messaging_service_user LOGIN PASSWORD 'messaging_service_password';
CREATE ROLE push_service_user LOGIN PASSWORD 'push_service_user_password';
CREATE ROLE webrtc_service_user LOGIN PASSWORD 'webrtc_service_password';
CREATE ROLE moderation_service_user LOGIN PASSWORD 'moderation_service_password';
-- All services use the same password from DB_PASSWORD environment variable
CREATE ROLE account_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE profile_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE device_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE messaging_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE push_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE webrtc_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE moderation_service_user LOGIN PASSWORD '${DB_PASSWORD}';
CREATE ROLE gateway_user LOGIN PASSWORD '${DB_PASSWORD}';
-- Create dedicated schemas for each service
CREATE SCHEMA IF NOT EXISTS account_schema AUTHORIZATION account_service_user;