菜单
Configure DigitalOcean Managed Postgres with bindable variables or schema isolation. Use when setting up databases, creating users, managing permissions, configuring multi-tenant schemas, or troubleshooting database connectivity on App Platform.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
| name | postgres |
| version | 1.0.0 |
| min_doctl_version | 1.82.0 |
| description | Configure DigitalOcean Managed Postgres with bindable variables or schema isolation. Use when setting up databases, creating users, managing permissions, configuring multi-tenant schemas, or troubleshooting database connectivity on App Platform. |
| related_skills | ["designer","networking"] |
| deprecated | false |
Configure DigitalOcean Managed Postgres databases with proper security isolation and production-ready defaults.
Need multiple isolated schemas in one database?
├── YES → Path B (Schema Isolation)
└── NO → Path A (Bindable Variables) ✅ RECOMMENDED
Use when: Single app per database, standard CRUD applications.
# 1. Create cluster + user via doctl (DO stores password internally)
doctl databases create my-app-db --engine pg --region nyc3 --size db-s-1vcpu-2gb
CLUSTER_ID=$(doctl databases list --format ID,Name --no-header | grep my-app-db | awk '{print $1}')
doctl databases db create $CLUSTER_ID myappdb
doctl databases user create $CLUSTER_ID myappuser
# 2. Grant permissions (REQUIRED - users have no access by default!)
# Run: scripts/grant_permissions.sql as doadmin
# 3. Reference in app spec
# .do/app.yaml
databases:
- name: db
engine: PG
production: true
cluster_name: my-app-db
db_name: myappdb
db_user: myappuser
services:
- name: api
envs:
- key: DATABASE_URL
scope: RUN_TIME
value: ${db.DATABASE_URL}
Full guide: See path-a-bindable-vars.md
Use when: Multi-tenant SaaS, multiple apps sharing one cluster, schema-level isolation needed.
# Hands-free setup (requires gh CLI)
./scripts/secure_setup.sh \
--admin-url "$ADMIN_URL" \
--app-name myapp \
--schema myapp \
--repo owner/repo
Password flows directly to GitHub Secrets — never displayed.
Full guide: See path-b-schema-isolation.md
| Variable | Example |
|---|---|
${db.DATABASE_URL} | postgresql://user:pass@host:25060/db?sslmode=require |
${db.HOSTNAME} | my-db-do-user-123.db.ondigitalocean.com |
${db.PORT} | 25060 |
${db.USERNAME} | myappuser |
${db.PASSWORD} | (auto-populated) |
${db.DATABASE} | myappdb |
${db.CA_CERT} | (certificate content) |
| Script | Purpose |
|---|---|
scripts/secure_setup.sh | Hands-free Path B setup with GitHub Secrets |
scripts/create_schema_user.py | Create isolated schema + user |
scripts/list_schemas_users.py | Audit existing schemas/users |
scripts/generate_connection_string.py | Build connection strings |
doctl databases commands| Error | Fix |
|---|---|
| "permission denied for schema" | Run permission SQL as doadmin |
| "relation does not exist" | Check search_path or use schema-qualified names |
| "too many connections" | Create connection pool via doctl |
| "SSL connection required" | Add ?sslmode=require to connection string |
| Bindable vars not populated | Verify production: true and names match exactly |
Full troubleshooting: See troubleshooting.md
Routes DigitalOcean App Platform tasks to specialized sub-skills. Use when working with App Platform deployments, migrations, database configuration, networking, or troubleshooting.
Migrate applications from Heroku, AWS, Render, Railway, Fly.io, or Docker Compose to DigitalOcean App Platform. Use when converting existing apps, mapping services, refactoring platform-specific code, or creating app specs from other platform configurations.
Configure DigitalOcean Gradient AI serverless inference and Agent Development Kit. Use when adding LLM inference, model access keys, serverless AI endpoints, or building AI agents with ADK on App Platform.
Deploy applications to DigitalOcean App Platform via GitHub Actions with proper environment management and secrets handling. Use when setting up CI/CD pipelines, configuring staging/production environments, managing deployment secrets, or creating GitHub Actions workflows.
Transform natural language application descriptions into production-ready DigitalOcean App Platform specifications. Use when designing apps, creating app specs, generating deploy.template.yaml, or architecting multi-component applications.
Set up local development environments with production parity for DigitalOcean App Platform. Use when setting up local dev, adding devcontainer to a project, running App Platform apps locally, or configuring backing services (Postgres, Redis, Kafka, S3).