Files
myos/stack/supabase/supabase.yml
T
2025-02-02 22:30:11 +01:00

273 lines
14 KiB
YAML

services:
studio:
container_name: !reset null
environment: !override
STUDIO_PG_META_URL: ${SUPABASE_STUDIO_PG_META_URL:-http://meta:8080}
POSTGRES_PASSWORD: ${SUPABASE_POSTGRES_PASSWORD}
DEFAULT_ORGANIZATION_NAME: ${SUPABASE_STUDIO_DEFAULT_ORGANIZATION:-Default Organization}
DEFAULT_PROJECT_NAME: ${SUPABASE_STUDIO_DEFAULT_PROJECT:-Default Project}
OPENAI_API_KEY: ${SUPABASE_OPENAI_API_KEY:-}
SUPABASE_URL: ${SUPABASE_URL:-http://kong:8000}
SUPABASE_PUBLIC_URL: ${SUPABASE_PUBLIC_URL:-http://localhost:8000}
SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
AUTH_JWT_SECRET: ${SUPABASE_JWT_SECRET}
LOGFLARE_API_KEY: ${SUPABASE_LOGFLARE_API_KEY}
LOGFLARE_URL: ${SUPABASE_LOGFLARE_URL:-http://analytics:4000}
NEXT_PUBLIC_ENABLE_LOGS: ${SUPABASE_NEXT_PUBLIC_ENABLE_LOGS:-true}
NEXT_ANALYTICS_BACKEND_PROVIDER: ${SUPABASE_NEXT_ANALYTICS_BACKEND_PROVIDER:-postgres}
kong:
build:
args:
- DOCKER_BUILD_DIR=docker/supabase/kong
- DOCKER_NETWORK=${DOCKER_NETWORK_DEFAULT:-_default}
- REALTIME_TENANT=${SUPABASE_REALTIME_TENANT:-realtime-dev}
- SUPABASE_KONG_VERSION=${SUPABASE_KONG_VERSION:-2.8.1}
context: ../..
dockerfile: docker/supabase/kong/Dockerfile
container_name: !reset null
image: ${DOCKER_REPOSITORY}/kong:${DOCKER_IMAGE_TAG}
environment: !override
KONG_DATABASE: ${SUPABASE_KONG_DATABASE:-off}
KONG_DECLARATIVE_CONFIG: ${SUPABASE_KONG_DECLARATIVE_CONFIG:-/home/kong/kong.yml}
KONG_DNS_ORDER: ${SUPABASE_KONG_DNS_ORDER:-LAST,A,CNAME}
KONG_PLUGINS: ${SUPABASE_KONG_PLUGINS:-request-transformer,cors,key-auth,acl,basic-auth}
KONG_NGINX_PROXY_PROXY_BUFFER_SIZE: ${SUPABASE_KONG_NGINX_PROXY_PROXY_BUFFER_SIZE:-160k}
KONG_NGINX_PROXY_PROXY_BUFFERS: ${SUPABASE_KONG_NGINX_PROXY_PROXY_BUFFERS:-64 160k}
SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
DASHBOARD_USERNAME: ${SUPABASE_DASHBOARD_USERNAME:-supabase}
DASHBOARD_PASSWORD: ${SUPABASE_DASHBOARD_PASSWORD}
ports: !override
- 8000/tcp
- 8443/tcp
auth:
container_name: !reset null
environment: !override
GOTRUE_API_HOST: ${SUPABASE_GOTRUE_API_HOST:-0.0.0.0}
GOTRUE_API_PORT: ${SUPABASE_GOTRUE_API_PORT:-9999}
API_EXTERNAL_URL: ${SUPABASE_API_EXTERNAL_URL:-${SUPABASE_PUBLIC_URL:-http://localhost:8000}}
GOTRUE_DB_DRIVER: ${SUPABASE_GOTRUE_DB_DRIVER:-postgres}
GOTRUE_DB_DATABASE_URL: postgres://${SUPABASE_POSTGRES_USER_AUTH:-supabase_auth_admin}:${SUPABASE_POSTGRES_PASSWORD_AUTH:-${SUPABASE_POSTGRES_PASSWORD}}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB:-postgres}
GOTRUE_SITE_URL: ${SUPABASE_SITE_URL:-${SUPABASE_PUBLIC_URL:-http://localhost:3000}}
GOTRUE_URI_ALLOW_LIST: ${SUPABASE_ADDITIONAL_REDIRECT_URLS:-}
GOTRUE_DISABLE_SIGNUP: ${SUPABASE_DISABLE_SIGNUP:-false}
GOTRUE_JWT_ADMIN_ROLES: ${SUPABASE_JWT_ADMIN_ROLES:-service_role}
GOTRUE_JWT_AUD: ${SUPABASE_JWT_AUD:-authenticated}
GOTRUE_JWT_DEFAULT_GROUP_NAME: ${SUPABASE_JWT_DEFAULT_GROUP_NAME:-authenticated}
GOTRUE_JWT_EXP: ${SUPABASE_JWT_EXPIRY:-3600}
GOTRUE_JWT_SECRET: ${SUPABASE_JWT_SECRET}
GOTRUE_EXTERNAL_EMAIL_ENABLED: ${SUPABASE_ENABLE_EMAIL_SIGNUP:-true}
GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED: ${SUPABASE_ENABLE_ANONYMOUS_USERS:-false}
GOTRUE_MAILER_AUTOCONFIRM: ${SUPABASE_ENABLE_EMAIL_AUTOCONFIRM:-false}
GOTRUE_EXTERNAL_SKIP_NONCE_CHECK: ${SUPABASE_EXTERNAL_SKIP_NONCE_CHECK:-false}
GOTRUE_MAILER_SECURE_EMAIL_CHANGE_ENABLED: ${SUPABASE_MAILER_SECURE_EMAIL_CHANGE_ENABLED:-true}
GOTRUE_SMTP_MAX_FREQUENCY: ${SUPABASE_SMTP_MAX_FREQUENCY:-1s}
GOTRUE_SMTP_ADMIN_EMAIL: ${SUPABASE_SMTP_ADMIN_EMAIL:-}
GOTRUE_SMTP_HOST: ${SUPABASE_SMTP_HOST:-}
GOTRUE_SMTP_PORT: ${SUPABASE_SMTP_PORT:-25}
GOTRUE_SMTP_USER: ${SUPABASE_SMTP_USER:-}
GOTRUE_SMTP_PASS: ${SUPABASE_SMTP_PASS:-}
GOTRUE_SMTP_SENDER_NAME: ${SUPABASE_SMTP_SENDER_NAME:-}
GOTRUE_MAILER_URLPATHS_INVITE: ${SUPABASE_MAILER_URLPATHS_INVITE:-/auth/v1/verify}
GOTRUE_MAILER_URLPATHS_CONFIRMATION: ${SUPABASE_MAILER_URLPATHS_CONFIRMATION:-/auth/v1/verify}
GOTRUE_MAILER_URLPATHS_RECOVERY: ${SUPABASE_MAILER_URLPATHS_RECOVERY:-/auth/v1/verify}
GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE: ${SUPABASE_MAILER_URLPATHS_EMAIL_CHANGE:-/auth/v1/verify}
GOTRUE_EXTERNAL_PHONE_ENABLED: ${SUPABASE_ENABLE_PHONE_SIGNUP:-true}
GOTRUE_SMS_AUTOCONFIRM: ${SUPABASE_ENABLE_PHONE_AUTOCONFIRM:-true}
GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_ENABLED: ${SUPABASE_GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_ENABLED:-false}
GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_URI: ${SUPABASE_GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_URI:-}
GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_SECRETS: ${SUPABASE_GOTRUE_HOOK_CUSTOM_ACCESS_TOKEN_SECRETS:-}
GOTRUE_HOOK_MFA_VERIFICATION_ATTEMPT_ENABLED: ${SUPABASE_GOTRUE_HOOK_MFA_VERIFICATION_ATTEMPT_ENABLED:-false}
GOTRUE_HOOK_MFA_VERIFICATION_ATTEMPT_URI: ${SUPABASE_GOTRUE_HOOK_MFA_VERIFICATION_ATTEMPT_URI:-}
GOTRUE_HOOK_SEND_SMS_ENABLED: ${SUPABASE_GOTRUE_HOOK_SEND_SMS_ENABLED:-false}
GOTRUE_HOOK_SEND_SMS_URI: ${SUPABASE_GOTRUE_HOOK_SEND_SMS_URI:-}
GOTRUE_HOOK_SEND_SMS_SECRETS: ${SUPABASE_GOTRUE_HOOK_SEND_SMS_SECRETS:-}
GOTRUE_HOOK_SEND_EMAIL_ENABLED: ${SUPABASE_GOTRUE_HOOK_SEND_EMAIL_ENABLED:-false}
GOTRUE_HOOK_SEND_EMAIL_URI: ${SUPABASE_GOTRUE_HOOK_SEND_EMAIL_URI:-}
GOTRUE_HOOK_SEND_EMAIL_SECRETS: ${SUPABASE_GOTRUE_HOOK_SEND_EMAIL_SECRETS:-}
rest:
container_name: !reset null
environment: !override
PGRST_DB_URI: postgres://${SUPABASE_POSTGRES_USER_REST:-authenticator}:${SUPABASE_POSTGRES_PASSWORD_REST:-${SUPABASE_POSTGRES_PASSWORD}}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB:-postgres}
PGRST_DB_SCHEMAS: ${SUPABASE_PGRST_DB_SCHEMAS:-public,storage,graphql_public}
PGRST_DB_ANON_ROLE: ${SUPABASE_PGRST_DB_ANON_ROLE:-anon}
PGRST_JWT_SECRET: ${SUPABASE_JWT_SECRET}
PGRST_DB_USE_LEGACY_GUCS: ${SUPABASE_PGRST_DB_USE_LEGACY_GUCS:-false}
PGRST_APP_SETTINGS_JWT_SECRET: ${SUPABASE_JWT_SECRET}
PGRST_APP_SETTINGS_JWT_EXP: ${SUPABASE_JWT_EXPIRY:-3600}
realtime:
container_name: !reset null
environment: !override
PORT: ${SUPABASE_REALTIME_PORT:-4000}
DB_HOST: ${SUPABASE_POSTGRES_HOST:-db}
DB_PORT: ${SUPABASE_POSTGRES_PORT:-5432}
DB_USER: ${SUPABASE_POSTGRES_USER_SUPABASE:-supabase_admin}
DB_PASSWORD: ${SUPABASE_POSTGRES_PASSWORD_SUPABASE:-${SUPABASE_POSTGRES_PASSWORD}}
DB_NAME: ${SUPABASE_POSTGRES_DB:-postgres}
DB_AFTER_CONNECT_QUERY: ${SUPABASE_POSTGRES_DB_AFTER_CONNECT_QUERY:-SET search_path TO _realtime}
DB_ENC_KEY: ${SUPABASE_POSTGRES_DB_ENC_KEY:-supabaserealtime}
API_JWT_SECRET: ${SUPABASE_JWT_SECRET}
SECRET_KEY_BASE: ${SUPABASE_SECRET_KEY_BASE}
ERL_AFLAGS: ${SUPABASE_REALTIME_ERL_AFLAGS:--proto_dist inet_tcp}
DNS_NODES: ${SUPABASE_REALTIME_DNS_NODES:-''}
RLIMIT_NOFILE: ${SUPABASE_REALTIME_RLIMIT_NOFILE:-10000}
APP_NAME: ${SUPABE_REALTIME_APP_NAME:-realtime}
SEED_SELF_HOST: ${SUPABASE_REALTIME_SEED_SELF_HOST:-true}
RUN_JANITOR: ${SUPABASE_REALTIME_RUN_JANITOR:-true}
SELF_HOST_TENANT_NAME: ${SUPABASE_REALTIME_TENANT:-realtime-dev}
MIX_ENV: ${SUPABASE_REALTIME_MIX_ENV:-prod}
healthcheck:
test:
[
"CMD",
"curl",
"-sSfL",
"--head",
"-o",
"/dev/null",
"-H",
"Authorization: Bearer ${SUPABASE_ANON_KEY}",
"http://localhost:4000/api/tenants/${SUPABASE_REALTIME_TENANT:-realtime-dev}/health"
]
timeout: 5s
interval: 5s
retries: 3
networks:
default:
aliases:
- ${SUPABASE_REALTIME_TENANT:-realtime-dev}
storage:
container_name: !reset null
environment: !override
ANON_KEY: ${SUPABASE_ANON_KEY}
SERVICE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
POSTGREST_URL: ${SUPABASE_POSTGREST_URL:-http://rest:3000}
PGRST_JWT_SECRET: ${SUPABASE_JWT_SECRET}
DATABASE_URL: postgres://${SUPABASE_POSTGRES_USER_STORAGE:-supabase_storage_admin}:${SUPABASE_POSTGRES_PASSWORD_STORAGE:-${SUPABASE_POSTGRES_PASSWORD}}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB:-postgres}
FILE_SIZE_LIMIT: ${SUPABASE_STORAGE_FILE_SIZE_LIMIT:-52428800}
STORAGE_BACKEND: ${SUPABASE_STORAGE_BACKEND:-file}
FILE_STORAGE_BACKEND_PATH: ${SUPABASE_FILE_STORAGE_BACKEND_PATH:-/var/lib/storage}
TENANT_ID: ${SUPABASE_STORAGE_TENANT_ID:-stub}
REGION: ${SUPABASE_STORAGE_REGION:-stub}
GLOBAL_S3_BUCKET: ${SUPABASE_STORAGE_GLOBAL_S3_BUCKET:-stub}
ENABLE_IMAGE_TRANSFORMATION: ${SUPABASE_STORAGE_ENABLE_IMAGE_TRANSFORMATION:-true}
IMGPROXY_URL: ${SUPABASE_IMGPROXY_URL:-http://imgproxy:5001}
imgproxy:
container_name: !reset null
environment: !override
IMGPROXY_BIND: ${SUPABASE_IMGPROXY_BIND:-:5001}
IMGPROXY_LOCAL_FILESYSTEM_ROOT: ${SUPABASE_IMGPROXY_LOCAL_FILESYSTEM_ROOT:-/}
IMGPROXY_USE_ETAG: ${SUPABASE_IMGPROXY_USE_ETAG:-true}
IMGPROXY_ENABLE_WEBP_DETECTION: ${SUPABASE_IMGPROXY_ENABLE_WEBP_DETECTION:-true}
meta:
container_name: !reset null
environment: !override
PG_META_PORT: ${SUPABASE_META_PORT:-8080}
PG_META_DB_HOST: ${SUPABASE_POSTGRES_HOST:-db}
PG_META_DB_PORT: ${SUPABASE_POSTGRES_PORT:-5432}
PG_META_DB_NAME: ${SUPABASE_POSTGRES_DB:-postgres}
PG_META_DB_USER: ${SUPABASE_POSTGRES_USER_SUPABASE:-supabase_admin}
PG_META_DB_PASSWORD: ${SUPABASE_POSTGRES_PASSWORD_SUPABASE:-${SUPABASE_POSTGRES_PASSWORD}}
functions:
build:
args:
- DOCKER_BUILD_DIR=docker/supabase/edge-runtime
- SUPABASE_EDGE_RUNTIME_VERSION=${SUPABASE_EDGE_RUNTIME_VERSION:-v1.65.3}
context: ../..
dockerfile: docker/supabase/edge-runtime/Dockerfile
container_name: !reset null
image: ${DOCKER_REPOSITORY}/edge-runtime:${DOCKER_IMAGE_TAG}
environment: !override
JWT_SECRET: ${SUPABASE_JWT_SECRET}
SUPABASE_URL: ${SUPABASE_URL:-http://kong:8000}
SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
SUPABASE_SERVICE_ROLE_KEY: ${SUPABASE_SERVICE_ROLE_KEY}
SUPABASE_DB_URL: postgresql://${SUPABASE_POSTGRES_USER:-postgres}:${SUPABASE_POSTGRES_PASSWORD}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB:-postgres}
VERIFY_JWT: "${SUPABASE_FUNCTIONS_VERIFY_JWT}"
analytics:
container_name: !reset null
environment: !override
LOGFLARE_NODE_HOST: ${SUPABASE_LOGFLARE_NODE_HOST:-127.0.0.1}
DB_USERNAME: ${SUPABASE_POSTGRES_USER_SUPABASE:-supabase_admin}
DB_DATABASE: ${SUPABASE_POSTGRES_DB_SUPABASE:-_supabase}
DB_HOSTNAME: ${SUPABASE_POSTGRES_HOST:-db}
DB_PORT: ${SUPABASE_POSTGRES_PORT:-5432}
DB_PASSWORD: ${SUPABASE_POSTGRES_PASSWORD_SUPABASE:-${SUPABASE_POSTGRES_PASSWORD}}
DB_SCHEMA: ${SUPABASE_POSTGRES_SCHEMA_SUPABASE:-_analytics}
LOGFLARE_API_KEY: ${SUPABASE_LOGFLARE_API_KEY}
LOGFLARE_SINGLE_TENANT: ${SUPABASE_LOGFLARE_SINGLE_TENANT:-true}
LOGFLARE_SUPABASE_MODE: ${SUPABASE_LOGFLARE_SUPABASE_MODE:-true}
LOGFLARE_MIN_CLUSTER_SIZE: ${SUPABASE_LOGFLARE_MIN_CLUSTER_SIZE:-1}
POSTGRES_BACKEND_URL: postgresql://${SUPABASE_POSTGRES_USER_SUPABASE:-supabase_admin}:${SUPABASE_POSTGRES_PASSWORD_SUPABASE:-${SUPABASE_POSTGRES_PASSWORD}}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB_SUPABASE:-_supabase}
POSTGRES_BACKEND_SCHEMA: ${SUPABASE_POSTGRES_SCHEMA_SUPABASE:-_analytics}
LOGFLARE_FEATURE_FLAG_OVERRIDE: ${SUPABASE_LOGFLARE_FEATURE_FLAG_OVERRIDE:-multibackend=true}
GOOGLE_PROJECT_ID: ${SUPABASE_GOOGLE_PROJECT_ID:-}
GOOGLE_PROJECT_NUMBER: ${SUPABASE_GOOGLE_PROJECT_NUMBER:-}
ports: !override
- 4000
db:
build:
args:
- DOCKER_BUILD_DIR=docker/supabase/postgres
- SUPABASE_POSTGRES_VERSION=${SUPABASE_POSTGRES_VERSION:-15.6.1.146}
context: ../..
dockerfile: docker/supabase/postgres/Dockerfile
container_name: !reset null
image: ${DOCKER_REPOSITORY}/postgres:${DOCKER_IMAGE_TAG}
environment: !override
POSTGRES_HOST: /var/run/postgresql
PGPORT: ${SUPABASE_POSTGRES_PORT:-5432}
POSTGRES_PORT: ${SUPABASE_POSTGRES_PORT:-5432}
PGPASSWORD: ${SUPABASE_POSTGRES_PASSWORD}
POSTGRES_PASSWORD: ${SUPABASE_POSTGRES_PASSWORD}
PGDATABASE: ${SUPABASE_POSTGRES_DB:-postgres}
POSTGRES_DB: ${SUPABASE_POSTGRES_DB:-postgres}
JWT_SECRET: ${SUPABASE_JWT_SECRET}
JWT_EXP: ${SUPABASE_JWT_EXPIRY:-3600}
vector:
build:
args:
- DOCKER_BUILD_DIR=docker/supabase/vector
- SUPABASE_VECTOR_VERSION=${SUPABASE_VECTOR_VERSION:-0.28.1-alpine}
context: ../..
dockerfile: docker/supabase/vector/Dockerfile
container_name: !reset null
image: ${DOCKER_REPOSITORY}/vector:${DOCKER_IMAGE_TAG}
environment: !override
LOGFLARE_API_KEY: ${SUPABASE_LOGFLARE_API_KEY}
supavisor:
container_name: !reset null
ports: !override
- 5432
- 6543
environment: !override
- PORT=${SUPABASE_SUPAVISOR_PORT:-4000}
- POSTGRES_PORT=${SUPABASE_POSTGRES_PORT:-5432}
- POSTGRES_DB=${SUPABASE_POSTGRES_DB:-postgres}
- POSTGRES_PASSWORD=${SUPABASE_POSTGRES_PASSWORD}
- DATABASE_URL=ecto://${SUPABASE_POSTGRES_USER_SUPABASE:-supabase_admin}:${SUPABASE_POSTGRES_PASSWORD_SUPABASE:-${SUPABASE_POSTGRES_PASSWORD}}@${SUPABASE_POSTGRES_HOST:-db}:${SUPABASE_POSTGRES_PORT:-5432}/${SUPABASE_POSTGRES_DB_SUPABASE:-_supabase}
- CLUSTER_POSTGRES=true
- SECRET_KEY_BASE=${SUPABASE_SECRET_KEY_BASE}
- VAULT_ENC_KEY=${SUPABASE_VAULT_ENC_KEY}
- API_JWT_SECRET=${SUPABASE_JWT_SECRET}
- METRICS_JWT_SECRET=${SUPABASE_JWT_SECRET}
- REGION=${SUPABASE_SUPAVISOR_REGION:-local}
- ERL_AFLAGS=${SUPABASE_SUPAVISOR_ERL_AFLAGS:--proto_dist inet_tcp}
- POOLER_TENANT_ID=${SUPABASE_POOLER_TENANT_ID:-local}
- POOLER_DEFAULT_POOL_SIZE=${SUPABASE_POOLER_DEFAULT_POOL_SIZE:-20}
- POOLER_MAX_CLIENT_CONN=${SUPABASE_POOLER_MAX_CLIENT_CONN:-100}
- POOLER_POOL_MODE=${SUPABASE_POOLER_POOL_MODE:-transaction}