chown

provision-openfga.sh

@@ -28,19 +28,14 @@ install -d "$t/dist"
 tar xf "$t/openfga.tgz" -C "$t/dist"
 rm -rf /opt/openfga
 mv "$t/dist" /opt/openfga
-chown -R root:root /opt/openfga
+touch /opt/openfga/openfga.db
+chown -R openfga:openfga /opt/openfga
 rm -rf "$t"
 
 # create the openfga role and database.
-pushd /
-sudo -sHu postgres psql -c "create role openfga login password 'abracadabra'"
-sudo -sHu postgres createdb -E UTF8 -O openfga openfga >/dev/null
 /opt/openfga/openfga migrate \
-    --datastore-engine postgres \
-    --datastore-uri "postgres://openfga:abracadabra@$POSTGRES_FQDN:5432/openfga"
-sudo -sHu postgres psql -c '\du'
-sudo -sHu postgres psql -l
-popd
+    --datastore-engine sqlite \
+    --datastore-uri file:/opt/openfga/openfga.db
 
 # configure.
 # see https://openfga.dev/docs/getting-started/setup-openfga/configure-openfga
@@ -76,6 +71,8 @@ playground:
   port: 3000
 EOF
 
+chown -R openfga:openfga /opt/openfga
+
 # brandonkal: disable TLS
 #install -o root -g openfga -m 444 "/vagrant/shared/example-ca/$OPENFGA_FQDN-crt.pem" /opt/openfga
 #install -o root -g openfga -m 440 "/vagrant/shared/example-ca/$OPENFGA_FQDN-key.pem" /opt/openfga