grant anon role

compose.yml

@@ -7,7 +7,7 @@ services:
     environment:
       PGRST_DB_URI: postgresql://postgres:${POSTGRES_PASSWORD}@/postgres?host=/var/run/postgresql
       PGRST_DB_SCHEMA: public
-      PGRST_DB_ANON_ROLE: postgres
+      PGRST_DB_ANON_ROLE: anon
     volumes:
       - postgres_socket:/var/run/postgresql
     depends_on: [db]

db/migrations/0_init.sql

@@ -1,4 +1,7 @@
 -- migrate:up
+CREATE ROLE anon;
+ALTER ROLE anon SET statement_timeout = '1s';
+
 CREATE FUNCTION update_timestamp() RETURNS trigger LANGUAGE plpgsql AS $$
   BEGIN
     NEW.updated = CURRENT_TIMESTAMP;
@@ -14,10 +17,12 @@ CREATE TABLE pages (
   updated TIMESTAMPTZ NOT NULL DEFAULT CURRENT_TIMESTAMP
 );
 
+GRANT ALL ON pages TO anon;
+
 CREATE TRIGGER pages_updated BEFORE UPDATE ON pages FOR EACH ROW
   EXECUTE PROCEDURE update_timestamp();
 
 -- migrate:down
-DROP TRIGGER pages_updated ON pages;
 DROP TABLE pages;
 DROP FUNCTION update_timestamp();
+DROP ROLE anon;