fly pg attach intentionally creates a lower privilege user, so you did the right thing! For enabling extensions, you might need more permissions! You can either login with the postgres user we generated for you and enable extensions, or you can give the app user enough permissions to run that migration. Up to you!