@simplehomelab/deployrr 6.0.0-rc3

package/apps/official/supabase/manifest.json

@@ -0,0 +1,327 @@
+{
+    "$schema": "../../../apps/manifest-schema.json",
+    "version": "1.2",
+    "app": {
+        "sname": "supabase",
+        "pname": "Supabase",
+        "description": "Supabase is an open-source Firebase alternative providing a full Postgres database, Auth, instant APIs, Edge Functions, Realtime subscriptions, Storage, and Vector embeddings. This installation includes 13 dedicated containers: Studio, Kong API gateway, GoTrue Auth, PostgREST, Realtime, Storage, ImgProxy, Postgres-Meta, Edge Functions, Logflare Analytics, PostgreSQL, Vector log collector, and Supavisor connection pooler.",
+        "descriptionShort": "Open-source Firebase alternative",
+        "icon": "https://cdn.jsdelivr.net/gh/selfhst/icons/svg/supabase.svg",
+        "_iconFuture": "sh-supabase",
+        "category": "official",
+        "menuNumber": "07",
+        "tags": [
+            "database",
+            "api",
+            "auth",
+            "storage",
+            "realtime",
+            "serverless",
+            "postgres"
+        ]
+    },
+    "deployment": {
+        "type": "multicontainer",
+        "compose": "compose.yml",
+        "profiles": [
+            "apps",
+            "all"
+        ],
+        "networks": [
+            "default"
+        ],
+        "webui": true,
+        "port": 8000,
+        "protocol": "http"
+    },
+    "dependencies": [
+        {
+            "sname": "supabase-db",
+            "pname": "Supabase PostgreSQL",
+            "compose": "supabase-db.yml",
+            "installOrder": 1,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Dedicated PostgreSQL database for Supabase"
+        },
+        {
+            "sname": "supabase-vector",
+            "pname": "Supabase Vector",
+            "compose": "supabase-vector.yml",
+            "installOrder": 2,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Log collector sidecar (Vector -> Logflare)"
+        },
+        {
+            "sname": "supabase-analytics",
+            "pname": "Supabase Analytics",
+            "compose": "supabase-analytics.yml",
+            "installOrder": 3,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Log analytics engine (Logflare)"
+        },
+        {
+            "sname": "supabase-rest",
+            "pname": "Supabase REST",
+            "compose": "supabase-rest.yml",
+            "installOrder": 4,
+            "waitForHealthy": false,
+            "required": true,
+            "description": "PostgREST instant REST API"
+        },
+        {
+            "sname": "supabase-auth",
+            "pname": "Supabase Auth",
+            "compose": "supabase-auth.yml",
+            "installOrder": 5,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "GoTrue authentication service"
+        },
+        {
+            "sname": "realtime-dev.supabase-realtime",
+            "pname": "Supabase Realtime",
+            "compose": "supabase-realtime.yml",
+            "installOrder": 6,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "WebSocket-based realtime subscriptions"
+        },
+        {
+            "sname": "supabase-imgproxy",
+            "pname": "Supabase ImgProxy",
+            "compose": "supabase-imgproxy.yml",
+            "installOrder": 7,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "On-the-fly image transformation proxy"
+        },
+        {
+            "sname": "supabase-storage",
+            "pname": "Supabase Storage",
+            "compose": "supabase-storage.yml",
+            "installOrder": 8,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "File storage API with S3 protocol support"
+        },
+        {
+            "sname": "supabase-meta",
+            "pname": "Supabase Meta",
+            "compose": "supabase-meta.yml",
+            "installOrder": 9,
+            "waitForHealthy": false,
+            "required": true,
+            "description": "Postgres introspection API for Studio"
+        },
+        {
+            "sname": "supabase-edge-functions",
+            "pname": "Supabase Edge Functions",
+            "compose": "supabase-functions.yml",
+            "installOrder": 10,
+            "waitForHealthy": false,
+            "required": true,
+            "description": "Deno-based serverless edge functions"
+        },
+        {
+            "sname": "supabase-pooler",
+            "pname": "Supabase Pooler",
+            "compose": "supabase-pooler.yml",
+            "installOrder": 11,
+            "waitForHealthy": true,
+            "required": true,
+            "description": "Supavisor connection pooler for Postgres"
+        },
+        {
+            "sname": "supabase-kong",
+            "pname": "Supabase Kong",
+            "compose": "supabase-kong.yml",
+            "installOrder": 12,
+            "waitForHealthy": false,
+            "required": true,
+            "description": "Kong API gateway — Traefik entrypoint on port 8000"
+        }
+    ],
+    "requirements": {
+        "prerequisites": [
+            "prerequisites"
+        ],
+        "apps": []
+    },
+    "database": {
+        "type": "postgresql",
+        "containerSname": "supabase-db",
+        "name": "postgres",
+        "user": "postgres",
+        "passwordSecret": "supabase_postgres_password",
+        "host": "supabase-db",
+        "port": 5432
+    },
+    "traefik": {
+        "supported": true,
+        "targetContainer": "supabase-kong",
+        "targetPort": 8000
+    },
+    "dashboard": {
+        "enabled": true,
+        "location": "local",
+        "showStats": true,
+        "portVariable": "SUPABASE_PORT"
+    },
+    "env": {
+        "variables": [
+            {
+                "name": "SUPABASE_PORT",
+                "description": "Web interface port (Studio via Kong)",
+                "type": "port",
+                "default": 8000,
+                "prompt": true,
+                "required": true,
+                "validation": {
+                    "type": "port",
+                    "min": 1,
+                    "max": 65535
+                }
+            },
+            {
+                "name": "SUPABASE_PROJECT_NAME",
+                "description": "Project name shown in Supabase Studio",
+                "type": "string",
+                "default": "Deployrr",
+                "prompt": true,
+                "required": false
+            },
+            {
+                "name": "OPENAI_API_KEY",
+                "description": "OpenAI API key for AI assistance in Studio (optional)",
+                "type": "string",
+                "default": "",
+                "prompt": true,
+                "required": false
+            }
+        ],
+        "secrets": [
+            {
+                "name": "supabase_postgres_password",
+                "description": "PostgreSQL database password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_jwt_secret",
+                "description": "JWT signing secret",
+                "type": "random",
+                "length": 40,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_anon_key",
+                "description": "Public anonymous API key (JWT)",
+                "type": "derived",
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_service_role_key",
+                "description": "Service role admin API key (JWT)",
+                "type": "derived",
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_dashboard_password",
+                "description": "Dashboard login password",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_secret_key_base",
+                "description": "Secret key base for Realtime and Supavisor",
+                "type": "random",
+                "length": 64,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_vault_enc_key",
+                "description": "Supavisor vault encryption key",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_pg_meta_crypto_key",
+                "description": "Crypto key for Studio and postgres-meta",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_logflare_public_token",
+                "description": "Logflare public access token",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_logflare_private_token",
+                "description": "Logflare private access token",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_s3_access_key_id",
+                "description": "Storage S3 protocol access key ID",
+                "type": "random",
+                "length": 32,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_s3_access_key_secret",
+                "description": "Storage S3 protocol secret key",
+                "type": "random",
+                "length": 64,
+                "addToCompose": false
+            },
+            {
+                "name": "supabase_pooler_tenant_id",
+                "description": "Supavisor pooler tenant identifier",
+                "type": "random",
+                "length": 20,
+                "addToCompose": false
+            }
+        ]
+    },
+    "hooks": {
+        "preInstall": {
+            "script": "files/pre-install.sh"
+        },
+        "postInstall": {
+            "messages": [
+                {
+                    "style": "note",
+                    "text": "Supabase uses \\Z513 containers\\Zn: Studio, Kong, Auth, REST, Realtime, Storage, ImgProxy, Meta, Functions, Analytics, DB, Vector, and Pooler."
+                },
+                {
+                    "style": "note",
+                    "text": "Dashboard login: username \\Z5supabase\\Zn, password stored in \\Z4$DOCKER_FOLDER/secrets/supabase_dashboard_password\\Zn"
+                },
+                {
+                    "style": "note",
+                    "text": "Access at \\Z4https://supabase.$DOMAINNAME_1\\Zn — all API routes go through Kong gateway."
+                },
+                {
+                    "style": "note",
+                    "text": "All secrets stored in \\Z4$DOCKER_FOLDER/secrets/\\Zn (supabase_*)."
+                }
+            ]
+        }
+    },
+    "status": {
+        "file": "07_supabase_status",
+        "successMessage": "Supabase Setup Completed",
+        "telemetryAction": "supabase"
+    }
+}

package/apps/official/supabase/supabase-analytics.yml

@@ -0,0 +1,32 @@
+services:
+  # Supabase Analytics - Logflare
+  supabase-analytics:
+    container_name: supabase-analytics
+    image: supabase/logflare:${SUPABASEANALYTICS_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "curl", "http://127.0.0.1:4000/health"]
+      timeout: 5s
+      interval: 5s
+      retries: 10
+    networks:
+      - default
+    environment:
+      - LOGFLARE_NODE_HOST=127.0.0.1
+      - DB_USERNAME=supabase_admin
+      - DB_DATABASE=_supabase
+      - DB_HOSTNAME=supabase-db
+      - DB_PORT=5432
+      - DB_PASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - DB_SCHEMA=_analytics
+      - LOGFLARE_PUBLIC_ACCESS_TOKEN=LOGFLARE-PUBLIC-TOKEN-PLACEHOLDER
+      - LOGFLARE_PRIVATE_ACCESS_TOKEN=LOGFLARE-PRIVATE-TOKEN-PLACEHOLDER
+      - LOGFLARE_SINGLE_TENANT=true
+      - LOGFLARE_SUPABASE_MODE=true
+      - POSTGRES_BACKEND_URL=postgresql://supabase_admin:POSTGRES-PASSWORD-PLACEHOLDER@supabase-db:5432/_supabase
+      - POSTGRES_BACKEND_SCHEMA=_analytics
+      - LOGFLARE_FEATURE_FLAG_OVERRIDE=multibackend=true
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-auth.yml

@@ -0,0 +1,34 @@
+services:
+  # Supabase Auth - GoTrue Authentication
+  supabase-auth:
+    container_name: supabase-auth
+    image: supabase/gotrue:${SUPABASEAUTH_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:9999/health"]
+      timeout: 5s
+      interval: 5s
+      retries: 3
+    networks:
+      - default
+    environment:
+      - GOTRUE_API_HOST=0.0.0.0
+      - GOTRUE_API_PORT=9999
+      - API_EXTERNAL_URL=https://supabase.${DOMAINNAME_1}
+      - GOTRUE_DB_DRIVER=postgres
+      - GOTRUE_DB_DATABASE_URL=postgres://supabase_auth_admin:POSTGRES-PASSWORD-PLACEHOLDER@supabase-db:5432/postgres
+      - GOTRUE_SITE_URL=https://supabase.${DOMAINNAME_1}
+      - GOTRUE_URI_ALLOW_LIST=
+      - GOTRUE_DISABLE_SIGNUP=false
+      - GOTRUE_JWT_ADMIN_ROLES=service_role
+      - GOTRUE_JWT_AUD=authenticated
+      - GOTRUE_JWT_DEFAULT_GROUP_NAME=authenticated
+      - GOTRUE_JWT_EXP=3600
+      - GOTRUE_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - GOTRUE_EXTERNAL_EMAIL_ENABLED=true
+      - GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED=false
+      - GOTRUE_MAILER_AUTOCONFIRM=true
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-db.yml

@@ -0,0 +1,42 @@
+services:
+  # Supabase DB - PostgreSQL Database
+  supabase-db:
+    container_name: supabase-db
+    image: supabase/postgres:${SUPABASEDB_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "pg_isready", "-U", "postgres", "-h", "127.0.0.1"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/supabase/volumes/db/realtime.sql:/docker-entrypoint-initdb.d/migrations/99-realtime.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/webhooks.sql:/docker-entrypoint-initdb.d/init-scripts/98-webhooks.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/roles.sql:/docker-entrypoint-initdb.d/init-scripts/99-roles.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/jwt.sql:/docker-entrypoint-initdb.d/init-scripts/99-jwt.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/_supabase.sql:/docker-entrypoint-initdb.d/migrations/97-_supabase.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/logs.sql:/docker-entrypoint-initdb.d/migrations/99-logs.sql:Z
+      - $DOCKERDIR/appdata/supabase/volumes/db/pooler.sql:/docker-entrypoint-initdb.d/migrations/99-pooler.sql:Z
+      - $DOCKERDIR/appdata/supabase-db/data:/var/lib/postgresql/data:Z
+    environment:
+      - POSTGRES_HOST=/var/run/postgresql
+      - PGPORT=5432
+      - POSTGRES_PORT=5432
+      - PGPASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - POSTGRES_PASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - PGDATABASE=postgres
+      - POSTGRES_DB=postgres
+      - JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - JWT_EXP=3600
+    command:
+      - postgres
+      - -c
+      - config_file=/etc/postgresql/postgresql.conf
+      - -c
+      - log_min_messages=fatal
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-functions.yml

@@ -0,0 +1,24 @@
+services:
+  # Supabase Edge Functions - Deno Runtime
+  supabase-edge-functions:
+    container_name: supabase-edge-functions
+    image: supabase/edge-runtime:${SUPABASEFUNCTIONS_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/supabase/volumes/functions:/home/deno/functions:Z
+      - $DOCKERDIR/appdata/supabase/deno-cache:/root/.cache/deno
+    environment:
+      - JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - SUPABASE_URL=http://supabase-kong:8000
+      - SUPABASE_PUBLIC_URL=https://supabase.${DOMAINNAME_1}
+      - SUPABASE_ANON_KEY=ANON-KEY-PLACEHOLDER
+      - SUPABASE_SERVICE_ROLE_KEY=SERVICE-ROLE-KEY-PLACEHOLDER
+      - SUPABASE_DB_URL=postgresql://postgres:POSTGRES-PASSWORD-PLACEHOLDER@supabase-db:5432/postgres
+      - VERIFY_JWT=false
+    command: ["start", "--main-service", "/home/deno/functions/main"]
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-imgproxy.yml

@@ -0,0 +1,25 @@
+services:
+  # Supabase ImgProxy - Image Transformation
+  supabase-imgproxy:
+    container_name: supabase-imgproxy
+    image: darthsim/imgproxy:${SUPABASEIMGPROXY_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "imgproxy", "health"]
+      timeout: 5s
+      interval: 5s
+      retries: 3
+    networks:
+      - default
+    volumes:
+      - $DOCKERDIR/appdata/supabase/storage:/var/lib/storage:z
+    environment:
+      - IMGPROXY_BIND=:5001
+      - IMGPROXY_LOCAL_FILESYSTEM_ROOT=/
+      - IMGPROXY_USE_ETAG=true
+      - IMGPROXY_ENABLE_WEBP_DETECTION=true
+      - IMGPROXY_MAX_SRC_RESOLUTION=16.8
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-kong.yml

@@ -0,0 +1,30 @@
+services:
+  # Supabase Kong - API Gateway
+  supabase-kong:
+    container_name: supabase-kong
+    image: kong:${SUPABASEKONG_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    ports:
+      - ${SUPABASE_PORT:-8000}:8000/tcp
+      - ${SUPABASE_KONG_HTTPS_PORT:-8443}:8443/tcp
+    volumes:
+      - $DOCKERDIR/appdata/supabase/volumes/api/kong.yml:/home/kong/temp.yml:ro
+    environment:
+      - KONG_DATABASE=off
+      - KONG_DECLARATIVE_CONFIG=/home/kong/kong.yml
+      - KONG_DNS_ORDER=LAST,A,CNAME
+      - KONG_PLUGINS=request-transformer,cors,key-auth,acl,basic-auth
+      - KONG_NGINX_PROXY_PROXY_BUFFER_SIZE=160k
+      - KONG_NGINX_PROXY_PROXY_BUFFERS=64 160k
+      - SUPABASE_ANON_KEY=ANON-KEY-PLACEHOLDER
+      - SUPABASE_SERVICE_KEY=SERVICE-ROLE-KEY-PLACEHOLDER
+      - DASHBOARD_USERNAME=DASHBOARD-USERNAME-PLACEHOLDER
+      - DASHBOARD_PASSWORD=DASHBOARD-PASSWORD-PLACEHOLDER
+    entrypoint: >
+      bash -c 'eval "echo \"$$(cat /home/kong/temp.yml)\"" > /home/kong/kong.yml && /docker-entrypoint.sh kong docker-start'
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-meta.yml

@@ -0,0 +1,20 @@
+services:
+  # Supabase Meta - Postgres Introspection API
+  supabase-meta:
+    container_name: supabase-meta
+    image: supabase/postgres-meta:${SUPABASEMETA_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    environment:
+      - PG_META_PORT=8080
+      - PG_META_DB_HOST=supabase-db
+      - PG_META_DB_PORT=5432
+      - PG_META_DB_NAME=postgres
+      - PG_META_DB_USER=supabase_admin
+      - PG_META_DB_PASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - CRYPTO_KEY=PG-META-CRYPTO-KEY-PLACEHOLDER
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-pooler.yml

@@ -0,0 +1,45 @@
+services:
+  # Supabase Pooler - Supavisor Connection Pooler
+  supabase-pooler:
+    container_name: supabase-pooler
+    image: supabase/supavisor:${SUPABASEPOOLER_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "curl", "-sSfL", "--head", "-o", "/dev/null", "http://127.0.0.1:4000/api/health"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+    networks:
+      - default
+    ports:
+      - ${SUPABASE_POOLER_PORT:-5432}:5432
+      - ${SUPABASE_POOLER_PROXY_PORT:-6543}:6543
+    volumes:
+      - $DOCKERDIR/appdata/supabase/volumes/pooler/pooler.exs:/etc/pooler/pooler.exs:ro
+    environment:
+      - PORT=4000
+      - POSTGRES_HOST=supabase-db
+      - POSTGRES_PORT=5432
+      - POSTGRES_DB=postgres
+      - POSTGRES_PASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - DATABASE_URL=ecto://supabase_admin:POSTGRES-PASSWORD-PLACEHOLDER@supabase-db:5432/_supabase
+      - CLUSTER_POSTGRES=true
+      - SECRET_KEY_BASE=SECRET-KEY-BASE-PLACEHOLDER
+      - VAULT_ENC_KEY=VAULT-ENC-KEY-PLACEHOLDER
+      - API_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - METRICS_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - REGION=local
+      - ERL_AFLAGS=-proto_dist inet_tcp
+      - POOLER_TENANT_ID=POOLER-TENANT-ID-PLACEHOLDER
+      - POOLER_DEFAULT_POOL_SIZE=20
+      - POOLER_MAX_CLIENT_CONN=100
+      - POOLER_POOL_MODE=transaction
+      - DB_POOL_SIZE=5
+    command:
+      - /bin/sh
+      - -c
+      - "/app/bin/migrate && /app/bin/supavisor eval \"$$(cat /etc/pooler/pooler.exs)\" && /app/bin/server"
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-realtime.yml

@@ -0,0 +1,42 @@
+services:
+  # Supabase Realtime - WebSocket Server
+  realtime-dev.supabase-realtime:
+    container_name: realtime-dev.supabase-realtime
+    image: supabase/realtime:${SUPABASEREALTIME_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    healthcheck:
+      test: ["CMD", "curl", "-sSfL", "--head", "-o", "/dev/null", "-H", "Authorization: Bearer ANON-KEY-PLACEHOLDER", "http://127.0.0.1:4000/api/tenants/realtime-dev/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+    networks:
+      - default
+    environment:
+      - PORT=4000
+      - DB_HOST=supabase-db
+      - DB_PORT=5432
+      - DB_USER=supabase_admin
+      - DB_PASSWORD=POSTGRES-PASSWORD-PLACEHOLDER
+      - DB_NAME=postgres
+      - DB_AFTER_CONNECT_QUERY=SET search_path TO _realtime
+      - DB_ENC_KEY=supabaserealtime
+      - API_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - SECRET_KEY_BASE=SECRET-KEY-BASE-PLACEHOLDER
+      - ERL_AFLAGS=-proto_dist inet_tcp
+      - ENABLE_TAILWIND=false
+      - DNS_NODES="''"
+      - RLIMIT_NOFILE=10000
+      - APP_NAME=realtime
+      - SEED_SELF_HOST=true
+      - RUN_JANITOR=true
+      - DISABLE_HEALTHCHECK_LOGGING=true
+      - FLY_ALLOC_ID=abc123
+      - FLY_APP_NAME=realtime
+      - ENABLE_CONNECTED_USERS_TRACKING=true
+    command: >
+      sh -c "/app/bin/migrate && /app/bin/realtime eval 'Realtime.Release.seeds(Realtime.Repo)' && /app/bin/server"
+    # DOCKER-LABELS-PLACEHOLDER

package/apps/official/supabase/supabase-rest.yml

@@ -0,0 +1,21 @@
+services:
+  # Supabase REST - PostgREST API
+  supabase-rest:
+    container_name: supabase-rest
+    image: postgrest/postgrest:${SUPABASEREST_VERSION_PIN}
+    security_opt:
+      - no-new-privileges:true
+    restart: unless-stopped
+    profiles: ["apps", "all"]
+    networks:
+      - default
+    environment:
+      - PGRST_DB_URI=postgres://authenticator:POSTGRES-PASSWORD-PLACEHOLDER@supabase-db:5432/postgres
+      - PGRST_DB_SCHEMAS=public,storage,graphql_public
+      - PGRST_DB_ANON_ROLE=anon
+      - PGRST_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - PGRST_DB_USE_LEGACY_GUCS=false
+      - PGRST_APP_SETTINGS_JWT_SECRET=JWT-SECRET-PLACEHOLDER
+      - PGRST_APP_SETTINGS_JWT_EXP=3600
+    command: ["postgrest"]
+    # DOCKER-LABELS-PLACEHOLDER