From 8ba22d3dc34aaadd0daa5fcb4e48bf7ceb059b61 Mon Sep 17 00:00:00 2001
From: WorkClub Automation <automation@workclub.local>
Date: Thu, 5 Mar 2026 11:07:12 +0100
Subject: [PATCH] fix(infra): replace PostgreSQL init.sql with init.sh for
 correct schema initialization

- Removed invalid init.sql with syntax error (ALTER DEFAULT PRIVILEGES IN DATABASE unsupported)
- Added init.sh with corrected SQL using IN SCHEMA public
- Fixes PostgreSQL initialization for RLS and permissions setup

Ultraworked with Sisyphus <https://github.com/code-yeongyu/oh-my-opencode>
Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
---
 infra/postgres/{init.sql => init.sh} | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)
 rename infra/postgres/{init.sql => init.sh} (70%)
 mode change 100644 => 100755

diff --git a/infra/postgres/init.sql b/infra/postgres/init.sh
old mode 100644
new mode 100755
similarity index 70%
rename from infra/postgres/init.sql
rename to infra/postgres/init.sh
index 4c4f417..0922dc0
--- a/infra/postgres/init.sql
+++ b/infra/postgres/init.sh
@@ -16,8 +16,13 @@ EOSQL
 psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" <<-EOSQL
     CREATE USER keycloak WITH PASSWORD 'keycloakpass';
     CREATE DATABASE keycloak OWNER keycloak;
-    ALTER DEFAULT PRIVILEGES IN DATABASE keycloak GRANT ALL ON TABLES TO keycloak;
-    ALTER DEFAULT PRIVILEGES IN DATABASE keycloak GRANT ALL ON SEQUENCES TO keycloak;
+EOSQL
+
+# Grant privileges in keycloak database
+psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" --dbname "keycloak" <<-EOSQL
+    GRANT ALL ON SCHEMA public TO keycloak;
+    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON TABLES TO keycloak;
+    ALTER DEFAULT PRIVILEGES IN SCHEMA public GRANT ALL ON SEQUENCES TO keycloak;
 EOSQL
 
 echo "PostgreSQL initialization complete: workclub and keycloak databases created"