docker-postgres-backup/docker-entrypoint-initdb-co.../1.1.0_02_master_create_ro_u...

#! /usr/bin/env bash

if [ "${POSTGRES_MASTER_MODE}" != 1 ]
then
  echo "Database is not in master mode. Exiting."
  exit 0
fi

psql <<-EOF
  CREATE USER "${POSTGRES_RO_USER}"
    NOSUPERUSER
    NOCREATEDB
    NOCREATEROLE
    LOGIN
    ENCRYPTED PASSWORD '${POSTGRES_RO_PASSWORD}';

  REVOKE ALL ON DATABASE ${POSTGRES_DB} FROM ${POSTGRES_RO_USER};
  GRANT CONNECT ON DATABASE ${POSTGRES_DB} TO ${POSTGRES_RO_USER};

  REVOKE ALL ON SCHEMA public FROM ${POSTGRES_RO_USER};
  GRANT USAGE ON SCHEMA public TO ${POSTGRES_RO_USER};

  GRANT SELECT ON ALL TABLES IN SCHEMA public TO ${POSTGRES_RO_USER};
  ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT SELECT ON TABLES TO ${POSTGRES_RO_USER};
EOF