diff --git a/infra/postgres/init.sql b/infra/postgres/init.sh
old mode 100644
new mode 100755
similarity index 70%
rename from infra/postgres/init.sql
rename to infra/postgres/init.sh
index 4c4f417..0922dc0
--- a/infra/postgres/init.sql
+++ b/infra/postgres/init.sh
@@ -16,8 +16,13 @@ EOSQL
 psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
     CREATE USER keycloak WITH PASSWORD 'keycloakpass';
     CREATE DATABASE keycloak OWNER keycloak;
-    ALTER DEFAULT PRIVILEGES IN DATABASE keycloak GRANT ALL ON TABLES TO keycloak;
-    ALTER DEFAULT PRIVILEGES IN DATABASE keycloak GRANT ALL ON SEQUENCES TO keycloak;
+EOSQL
+
+# Grant privileges in keycloak database
+psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "keycloak" <<-EOSQL
+    GRANT ALL ON SCHEMA public TO keycloak;
+    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO keycloak;
+    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO keycloak;
 EOSQL
 
 echo "PostgreSQL initialization complete: workclub and keycloak databases created"