Create read-only user for specific Postgres db

script.sql

create user user_name with encrypted password '...';
grant connect on database "db-name" TO user_name;
grant usage on schema public to user_name;
grant select on all tables in schema public to user_name;
alter default privileges in schema public grant select on tables to user_name;