ci db-migrations

services/db-migrations/.dockerignore

@@ -0,0 +1,3 @@
+node_modules
+dist
+*.log

services/db-migrations/.gitignore

@@ -1 +1 @@
-.migrate
+.migrate

services/db-migrations/.migrate

@@ -0,0 +1,9 @@
+{
+  "lastRun": "1732483677017-dbs.js",
+  "migrations": [
+    {
+      "title": "1732483677017-dbs.js",
+      "timestamp": 1733125611801
+    }
+  ]
+}

services/db-migrations/Dockerfile

@@ -0,0 +1,7 @@
+FROM oven/bun:1.1.38-alpine
+
+VOLUME /opt/migrations/data
+
+COPY . ./
+
+CMD ["bun", "./node_modules/migrate/bin/migrate", "-f", "/opt/migrations/data/migrations.json"]

services/db-migrations/migrations/1732483677017-dbs.js

@@ -1,6 +1,23 @@
 import { fetch } from "pouchdb-fetch";
 
 const dbsSecurity = {
+  _users: {
+    admins: { roles: ["_admin"] },
+    members: { roles: ["_admin"] },
+  },
+  _replicator: {
+    admins: { roles: ["_admin"] },
+    members: { roles: ["_admin"] },
+  },
+  _global_changes: {
+    admins: { roles: ["_admin"] },
+    members: { roles: ["_admin"] },
+  },
+
+  server_settings: {
+    admins: { roles: ["_admin"] },
+    members: { roles: ["_admin"] },
+  },
   web_push_subscriptions: {
     admins: { roles: ["_admin"] },
     members: { roles: [] },
@@ -9,10 +26,6 @@ const dbsSecurity = {
     admins: { roles: ["_admin"] },
     members: { roles: [] },
   },
-  server_settings: {
-    admins: { roles: ["_admin"] },
-    members: { roles: ["_admin"] },
-  },
   qr: {
     admins: { roles: ["_admin"] },
     members: { roles: [] },

services/db-migrations/package.json

@@ -14,5 +14,8 @@
     "pouchdb-core": "^9.0.0",
     "pouchdb-fetch": "^9.0.0",
     "pouchdb-find": "^9.0.0"
+  },
+  "scripts": {
+    "migrate": "migrate"
   }
 }