- add sops-secrets for admin pwd - POSTGRES_MULTIPLE_DATABASES as json to specify users and extensions - initdb docker entrypoint script to create dbs, users and extensions from json
- create users & dbs - setup db permissions - install extensions
- use dockerfile to install postgis during build