From aa72e8be083a8c4fbed7a374b5129d4003a3d0b3 Mon Sep 17 00:00:00 2001
From: Lorenz Leutgeb <lorenz@leutgeb.xyz>
Date: Fri, 12 Apr 2024 11:32:13 +0200
Subject: [PATCH] mcaptcha: Only own mcaptcha DB

---
 modules/mcaptcha.nix | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/modules/mcaptcha.nix b/modules/mcaptcha.nix
index 64b708dd..e924a3e2 100644
--- a/modules/mcaptcha.nix
+++ b/modules/mcaptcha.nix
@@ -262,14 +262,11 @@ in {
       ensureUsers = [
         {
           name = cfg.user;
+          ensureDBOwnership = true;
         }
       ];
     };
 
-    systemd.services.postgresql.postStart = lib.mkIf cfg.database.createLocally (lib.mkAfter ''
-      $PSQL ${cfg.settings.database.name} -c 'GRANT ALL PRIVILEGES ON SCHEMA public TO "${cfg.user}"'
-    '');
-
     services.redis.servers.mcaptcha = lib.mkIf cfg.redis.createLocally {
       enable = true;
       port = cfg.redis.port;