development
Deploy Supabase in one click
Build a Postgres backend with auth, storage, and a dashboard from one project. An open-source alternative to Firebase.
TemplatesSupabase
Deploy
What gets deployed
Deploys Supabase as a multi-service group (Kong gateway, Studio, Auth, PostgREST, Realtime, Storage, Meta, Edge Functions, imgproxy). PostgreSQL and object storage are platform add-ons: on shared zones they are a communal logical database and a communal-s3 bucket. Kong is the public URL and proxies Studio at /. Sign in to Studio with the gateway env vars DASHBOARD_USERNAME (supabase) and DASHBOARD_PASSWORD (generated per deploy). The anon and service_role keys are the upstream demo JWTs — rotate JWT_SECRET and those keys before production use.
This stack
Web
Supabase server
PostgreSQL
managed database · TCP:5432
Tenant
managed other
managed other · TCP:587
supabase-studio
queue worker
supabase-auth
queue worker
supabase-rest
queue worker
supabase-rest-ro
queue worker
supabase-realtime
queue worker
supabase-storage
queue worker
supabase-meta
queue worker
supabase-functions
queue worker
supabase-imgproxy
queue worker
Deploys Supabase as a multi-service group (Kong gateway, Studio, Auth, PostgREST, Realtime, Storage, Meta, Edge Functions, imgproxy). PostgreSQL and object storage are platform add-ons: on shared zones they are a communal logical database and a communal-s3 bucket. Kong is the public URL and proxies Studio at /. Sign in to Studio with the gateway env vars DASHBOARD_USERNAME (supabase) and DASHBOARD_PASSWORD (generated per deploy). The anon and service_role keys are the upstream demo JWTs — rotate JWT_SECRET and those keys before production use.
After you deploy
Deploys Supabase as a multi-service group (Kong gateway, Studio, Auth, PostgREST, Realtime, Storage, Meta, Edge Functions, imgproxy). PostgreSQL and object storage are platform add-ons: on shared zones they are a communal logical database and a communal-s3 bucket. Kong is the public URL and proxies Studio at /. Sign in to Studio with the gateway env vars DASHBOARD_USERNAME (supabase) and DASHBOARD_PASSWORD (generated per deploy). The anon and service_role keys are the upstream demo JWTs — rotate JWT_SECRET and those keys before production use.
Reference
Environment variables
Set at deploy. Empty values are yours to fill.
| Variable | Description | Required |
|---|---|---|
| KONG_DATABASE | Default: off | Optional |
| KONG_DECLARATIVE_CONFIG | Default: /usr/local/kong/kong.yml | Optional |
| KONG_DNS_ORDER | Default: LAST,A,CNAME | Optional |
| KONG_DNS_NOT_FOUND_TTL | Default: 1 | Optional |
| KONG_PLUGINS | Default: request-transformer,cors,key-auth,acl,basic-auth,request-termination,ip-restriction,pre-function,post-function | Optional |
| KONG_ROUTER_FLAVOR | Default: expressions | Optional |
| KONG_NGINX_WORKER_PROCESSES | Default: 2 | Optional |
| KONG_PROXY_LISTEN | Default: 0.0.0.0:8000 | Optional |
| KONG_LOG_LEVEL | Default: warn | Optional |
| KONG_TRUSTED_IPS | Default: 0.0.0.0/0,::/0 | Optional |
| KONG_REAL_IP_HEADER | Default: X-Forwarded-For | Optional |
| KONG_NGINX_HTTP_LOG_FORMAT | Default: sb_json escape=json '{"client":"$remote_addr","country":"$http_cf_ipcountry","cdn_country":"$http_cdn_requestcountrycode","method":"$request_method","uri":"$request_uri","protocol":"$server_protocol","status":$status,"bytes_out":$body_bytes_sent,"bytes_in":$request_length,"request_time":$request_time,"host":"$host","referer":"$http_referer","agent":"$http_user_agent","cache_status":"$upstream_http_cf_cache_status","error_code":"$upstream_http_x_sb_error_code"}' | Optional |
| KONG_PROXY_ACCESS_LOG | Default: /dev/stdout sb_json | Optional |
| SUPABASE_ANON_KEY | Default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE | Optional |
| SUPABASE_SERVICE_KEY | Default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJzZXJ2aWNlX3JvbGUiLAogICAgImlzcyI6ICJzdXBhYmFzZS1kZW1vIiwKICAgICJpYXQiOiAxNjQxNzY5MjAwLAogICAgImV4cCI6IDE3OTk1MzU2MDAKfQ.DaYlNEoUrrEn2Ig7tqibS-PHK5vgusbcbo7X36XVt4Q | Optional |
| SUPABASE_PUBLISHABLE_KEY | Default: sb_publishable_{{KUBERO_GEN_ALNUM:32}} | Optional |
| SUPABASE_SECRET_KEY | Default: sb_secret_{{KUBERO_GEN_ALNUM:40}} | Optional |
| ANON_KEY_ASYMMETRIC | Default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE | Optional |
| SERVICE_ROLE_KEY_ASYMMETRIC | Default: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJzZXJ2aWNlX3JvbGUiLAogICAgImlzcyI6ICJzdXBhYmFzZS1kZW1vIiwKICAgICJpYXQiOiAxNjQxNzY5MjAwLAogICAgImV4cCI6IDE3OTk1MzU2MDAKfQ.DaYlNEoUrrEn2Ig7tqibS-PHK5vgusbcbo7X36XVt4Q | Optional |
| DASHBOARD_USERNAME | Default: supabase | Optional |
| DASHBOARD_PASSWORD | Default: {{KUBERO_GEN_ALNUM:24}} | Optional |
| KONG_REST_READ_REPLICAS | Default: on | Optional |
Ready to deploy Supabase?
One click. Dependencies pre-wired. No infrastructure to manage.