#!/usr/bin/env bash
set -euo pipefail
psql --username "$POSTGRES_USER" --dbname "$POSTGRES_DB" \
  --set ON_ERROR_STOP=1 --set app_password="$LAB_APP_PASSWORD" <<'SQL'
CREATE ROLE lab_app LOGIN PASSWORD :'app_password';
REVOKE CREATE ON SCHEMA public FROM PUBLIC;
CREATE TABLE pool_marker (id integer PRIMARY KEY, label text NOT NULL);
INSERT INTO pool_marker VALUES (1, 'ready');
GRANT CONNECT ON DATABASE pool_lab TO lab_app;
GRANT USAGE ON SCHEMA public TO lab_app;
GRANT SELECT, INSERT, UPDATE, DELETE ON pool_marker TO lab_app;
SQL