-- Runs once on first DB init (mounted into /docker-entrypoint-initdb.d/).
-- The MARIADB_USER ('app') is created by the image with full grants on the
-- app database; Voltro's binlog CDC reader ALSO needs replication grants to
-- tail the binary log.
GRANT REPLICATION SLAVE, REPLICATION CLIENT ON *.* TO 'app'@'%';
FLUSH PRIVILEGES;
