{"repo":"kazhuravlev/database-gateway","free":true,"listed":false,"github":"https://github.com/kazhuravlev/database-gateway","clone":"git clone https://github.com/kazhuravlev/database-gateway.git","description":"Safe access to production databases","language":"Go","stars":39,"topics":["acl","database","database-access","database-security","gateway","postgres","security","devsecops","production"],"license":"GPL-3.0","category":"databases-storage","readme_excerpt":"Database Gateway This service provides a unified web interface for secure, controlled access to company databases. It enables employees to run queries on production databases while enforcing Open Policy Agent ( OPA ) policies. For example, team leads may have permissions to execute both SELECT and INSERT queries on certain tables, while other team members are restricted to read-only ( SELECT ) access. This approach ensures that database interactions are managed safely and that each user's access is tailored to their role and responsibilities. TL;DR - Run approved SQL against multiple PostgreSQL targets from one web UI. - Authenticate users via OIDC and enforce OPA rules by user, target, operation, and table. - Store query results (with shareable links and execution metadata) for debugging and auditing. Table of Contents - TL;DR - Architecture Overview - Quickstart with example setup - Features - Advanced Configuration - Performance Optimizations - Security Considerations - Edge Cases and Troubleshooting - Interesting projects Architecture Overview This application acts as a secure gateway to multiple PostgreSQL instances, allowing authenticated users to run approved queries through a unified web interface, with fine-grained OPA policies controlling access. Components 1. Local PostgreSQL Database : - Stores query results and user profiles. - Acts as a cache for query results, allowing unique links for debugging without re-execution. 2. Remote PostgreSQL Instances : - Host prod","default_branch":null,"files":null,"tree":[],"storefront":"/r/kazhuravlev","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/kazhuravlev/database-gateway/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}