diff --git a/ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql b/ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql
new file mode 100644
index 000000000..57b838d55
--- /dev/null
+++ b/ansible/files/postgresql_extension_custom_scripts/supabase_vault/after-create.sql
@@ -0,0 +1,3 @@
+grant usage on schema vault to postgres with grant option;
+grant select on vault.secrets, vault.decrypted_secrets to postgres with grant option;
+grant execute on function vault.create_secret, vault.update_secret, vault._crypto_aead_det_decrypt to postgres with grant option;
diff --git a/common-nix.vars.pkr.hcl b/common-nix.vars.pkr.hcl
index 241978e34..a96185493 100644
--- a/common-nix.vars.pkr.hcl
+++ b/common-nix.vars.pkr.hcl
@@ -1 +1 @@
-postgres-version = "15.6.1.143"
+postgres-version = "15.6.1.143-vault-1"