From a37b1a91bf6eb83722f830418527efb17efd5bba Mon Sep 17 00:00:00 2001
From: Sovran Systems <99053422+naturallaw777@users.noreply.github.com>
Date: Mon, 10 Aug 2026 11:44:19 -0500
Subject: [PATCH] Fix PostgreSQL ensureUsers: use ensureDBOwnership instead of
 ensureClauses

ensureClauses generates ALTER ROLE clauses, not GRANT statements, so
'"DATABASE btcpayserver" = "ALL PRIVILEGES"' produced invalid SQL.
ensureDBOwnership = true makes each user own its database, which is
the intended effect.
---
 modules/bitcoin/btcpayserver.nix | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/bitcoin/btcpayserver.nix b/modules/bitcoin/btcpayserver.nix
index 869bc75..e02673d 100644
--- a/modules/bitcoin/btcpayserver.nix
+++ b/modules/bitcoin/btcpayserver.nix
@@ -248,8 +248,8 @@ in {
         enable = true;
         ensureDatabases = [ "btcpayserver" "nbxplorer" ];
         ensureUsers = [
-          { name = cfg.btcpayserver.user; ensureClauses = { "DATABASE btcpayserver" = "ALL PRIVILEGES"; }; }
-          { name = cfg.nbxplorer.user; ensureClauses = { "DATABASE nbxplorer" = "ALL PRIVILEGES"; }; }
+          { name = cfg.btcpayserver.user; ensureDBOwnership = true; }
+          { name = cfg.nbxplorer.user; ensureDBOwnership = true; }
         ];
       };