added security to guest_user

zkbenchmark-docker/docker-compose.yml

@@ -7,6 +7,7 @@ services:
     build: .
     environment:
       POSTGRES_PASSWORD: ${INGO_BENCHMARKS_DB_PASSWORD}
+      GUEST_PASSWORD: ${INGO_BENCHMARKS_GUEST_USER_PASSWORD}
     ports:
       - "5432:5432"
     volumes:

zkbenchmark-docker/init.sql/001 - read-only user.sql → zkbenchmark-docker/init.sql/001 - guest_user.sql

@@ -3,14 +3,16 @@
 
 -- Create a guest_user with read-only privileges and no password
 
-CREATE USER guest_user WITH
-    LOGIN -- Allows the user to log in
-    NOSUPERUSER -- Ensures the user is not a superuser
-    NOCREATEDB -- Prevents the user from creating databases
-    NOCREATEROLE -- Prevents the user from creating roles
-    INHERIT -- Allows the user to inherit roles
-    NOREPLICATION -- Prevents the user from replicating data
-    CONNECTION LIMIT -1; -- Sets an unlimited connection limit
+-- CREATE USER guest_user WITH
+--     LOGIN -- Allows the user to log in
+--     NOSUPERUSER -- Ensures the user is not a superuser
+--     NOCREATEDB -- Prevents the user from creating databases
+--     NOCREATEROLE -- Prevents the user from creating roles
+--     INHERIT -- Allows the user to inherit roles
+--     NOREPLICATION -- Prevents the user from replicating data
+--     CONNECTION LIMIT -1; -- Sets an unlimited connection limit
+
+CREATE USER guest_user WITH PASSWORD '$GUEST_PASSWORD';
 
 -- Grant read-only privileges to the user on a specific database 'ingo_benchmarks'
 GRANT CONNECT ON DATABASE ingo_benchmarks TO guest_user;

zkbenchmark-docker/pg_hba.conf

@@ -127,4 +127,4 @@ host    replication     all             127.0.0.1/32            trust
 host    replication     all             ::1/128                 trust
 
 #host all all all scram-sha-256
-host all all 0.0.0.0/0 trust
+host all all 0.0.0.0/0 md5