{ "manifest_version": "1.0.0", "template": { "id": "577ed548-5d45-4f17-a0e2-744269697a38", "slug": "supabase-railway", "name": "Supabase", "description": "Firebase alternative. Full stack: auth, storage, realtime and functions", "url": "https://railway.com/deploy/supabase-railway", "upstream": { "repo_url": "https://github.com/gridalpha/supabase-railway" } }, "services": [ { "name": "auth", "source": { "image": "supabase/gotrue:v2.189.0" }, "needs_volume": false, "http": false }, { "name": "kong", "source": { "repo": "https://github.com/gridalpha/supabase-railway" }, "needs_volume": false, "http": true }, { "name": "rest", "source": { "image": "postgrest/postgrest:v14.12" }, "needs_volume": false, "http": false }, { "name": "db", "source": { "repo": "https://github.com/gridalpha/supabase-railway" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "realtime-dev", "source": { "image": "supabase/realtime:v2.102.3" }, "needs_volume": false, "http": false }, { "name": "meta", "source": { "image": "supabase/postgres-meta:v0.96.6" }, "needs_volume": false, "http": false }, { "name": "functions", "source": { "repo": "https://github.com/gridalpha/supabase-railway" }, "needs_volume": false, "http": false }, { "name": "studio", "source": { "repo": "https://github.com/gridalpha/supabase-railway" }, "needs_volume": false, "http": false }, { "name": "imgproxy", "source": { "image": "darthsim/imgproxy:v3.30.1" }, "needs_volume": false, "http": false }, { "name": "storage", "source": { "repo": "https://github.com/gridalpha/supabase-railway" }, "needs_volume": false, "http": false } ], "required_inputs": [ { "key": "PORT", "service": "auth", "description": "Health check port", "secret": false, "strategy": "default", "default": "9999" }, { "key": "GOTRUE_JWT_AUD", "service": "auth", "description": "Audience claim for user tokens", "secret": false, "strategy": "default", "default": "authenticated" }, { "key": "GOTRUE_JWT_EXP", "service": "auth", "description": "Access token lifetime in seconds", "secret": false, "strategy": "default", "default": "3600" }, { "key": "GOTRUE_API_HOST", "service": "auth", "description": "Bind address inside container", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "GOTRUE_API_PORT", "service": "auth", "description": "Auth server listen port", "secret": false, "strategy": "default", "default": "9999" }, { "key": "GOTRUE_SITE_URL", "service": "auth", "description": "Default post-auth redirect target", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "API_EXTERNAL_URL", "service": "auth", "description": "Public auth API base URL", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "GOTRUE_DB_DRIVER", "service": "auth", "description": "Database driver", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "GOTRUE_JWT_ISSUER", "service": "auth", "description": "Issuer claim on issued tokens", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "GOTRUE_JWT_SECRET", "service": "auth", "description": "Shared HS256 signing secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SUPABASE_STACK_REV", "service": "auth", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "GOTRUE_DISABLE_SIGNUP", "service": "auth", "description": "Set true to close registration", "secret": false, "strategy": "default", "default": "false" }, { "key": "GOTRUE_DB_DATABASE_URL", "service": "auth", "description": "Auth schema connection string", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "GOTRUE_JWT_ADMIN_ROLES", "service": "auth", "description": "Roles treated as admin", "secret": false, "strategy": "default", "default": "service_role" }, { "key": "GOTRUE_SMS_AUTOCONFIRM", "service": "auth", "description": "Do not auto-confirm phone numbers", "secret": false, "strategy": "default", "default": "false" }, { "key": "GOTRUE_MAILER_AUTOCONFIRM", "service": "auth", "description": "Confirm emails without SMTP", "secret": false, "strategy": "default", "default": "true" }, { "key": "GOTRUE_EXTERNAL_EMAIL_ENABLED", "service": "auth", "description": "Allow email sign-up and sign-in", "secret": false, "strategy": "default", "default": "true" }, { "key": "GOTRUE_EXTERNAL_PHONE_ENABLED", "service": "auth", "description": "Phone auth off, needs SMS provider", "secret": false, "strategy": "default", "default": "false" }, { "key": "GOTRUE_JWT_DEFAULT_GROUP_NAME", "service": "auth", "description": "Default Postgres role for users", "secret": false, "strategy": "default", "default": "authenticated" }, { "key": "GOTRUE_MAILER_URLPATHS_INVITE", "service": "auth", "description": "Invite link path", "secret": false, "strategy": "default", "default": "/auth/v1/verify" }, { "key": "GOTRUE_MAILER_URLPATHS_RECOVERY", "service": "auth", "description": "Password recovery link path", "secret": false, "strategy": "default", "default": "/auth/v1/verify" }, { "key": "GOTRUE_MAILER_URLPATHS_CONFIRMATION", "service": "auth", "description": "Confirmation link path", "secret": false, "strategy": "default", "default": "/auth/v1/verify" }, { "key": "GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE", "service": "auth", "description": "Email change link path", "secret": false, "strategy": "default", "default": "/auth/v1/verify" }, { "key": "GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED", "service": "auth", "description": "Disable anonymous sign-in", "secret": false, "strategy": "default", "default": "false" }, { "key": "PORT", "service": "kong", "description": "Public gateway listen port", "secret": false, "strategy": "default", "default": "8000" }, { "key": "JWT_SECRET", "service": "kong", "description": "Required: derives the anon/service_role API keys", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "KONG_PLUGINS", "service": "kong", "description": "Enabled gateway plugins", "secret": false, "strategy": "default", "default": "request-transformer,cors,key-auth,acl,basic-auth,request-termination,ip-restriction,post-function" }, { "key": "KONG_DATABASE", "service": "kong", "description": "Declarative config, no Kong DB", "secret": false, "strategy": "default", "default": "off" }, { "key": "KONG_DNS_ORDER", "service": "kong", "description": "Resolve private IPv4 and IPv6", "secret": false, "strategy": "default", "default": "LAST,A,AAAA,CNAME" }, { "key": "DASHBOARD_PASSWORD", "service": "kong", "description": "Studio basic-auth password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DASHBOARD_USERNAME", "service": "kong", "description": "Studio basic-auth username", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "KONG_DNS_VALID_TTL", "service": "kong", "description": "Re-resolve upstreams every five seconds", "secret": false, "strategy": "default", "default": "5" }, { "key": "KONG_ROUTER_FLAVOR", "service": "kong", "description": "Expression-based route matching", "secret": false, "strategy": "default", "default": "expressions" }, { "key": "SUPABASE_STACK_REV", "service": "kong", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "2" }, { "key": "KONG_PROXY_ACCESS_LOG", "service": "kong", "description": "Send access log to platform logs", "secret": false, "strategy": "default", "default": "/dev/stdout combined" }, { "key": "KONG_DNS_NOT_FOUND_TTL", "service": "kong", "description": "Cache negative DNS one second", "secret": false, "strategy": "default", "default": "1" }, { "key": "KONG_DECLARATIVE_CONFIG", "service": "kong", "description": "Path to rendered gateway config", "secret": false, "strategy": "default", "default": "/tmp/kong.yml" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "kong", "description": "Provide a value for RAILWAY_DOCKERFILE_PATH.", "secret": false, "strategy": "default", "default": "kong/Dockerfile" }, { "key": "KONG_NGINX_WORKER_PROCESSES", "service": "kong", "description": "Pin workers to container CPU", "secret": false, "strategy": "default", "default": "2" }, { "key": "KONG_NGINX_PROXY_PROXY_BUFFERS", "service": "kong", "description": "Upstream response buffers", "secret": false, "strategy": "default", "default": "64 160k" }, { "key": "KONG_NGINX_PROXY_PROXY_BUFFER_SIZE", "service": "kong", "description": "Upstream header buffer size", "secret": false, "strategy": "default", "default": "160k" }, { "key": "PORT", "service": "rest", "description": "Health check port", "secret": false, "strategy": "default", "default": "3000" }, { "key": "PGRST_DB_URI", "service": "rest", "description": "Connection string as authenticator role", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGRST_DB_SCHEMAS", "service": "rest", "description": "Schemas exposed over REST", "secret": false, "strategy": "default", "default": "public,graphql_public" }, { "key": "PGRST_JWT_SECRET", "service": "rest", "description": "Verifies incoming API JWTs", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGRST_DB_MAX_ROWS", "service": "rest", "description": "Max rows returned per request", "secret": false, "strategy": "default", "default": "1000" }, { "key": "PGRST_SERVER_HOST", "service": "rest", "description": "Listen on all interfaces", "secret": false, "strategy": "default", "default": "*" }, { "key": "PGRST_SERVER_PORT", "service": "rest", "description": "REST API listen port", "secret": false, "strategy": "default", "default": "3000" }, { "key": "PGRST_DB_ANON_ROLE", "service": "rest", "description": "Role used for unauthenticated requests", "secret": false, "strategy": "default", "default": "anon" }, { "key": "SUPABASE_STACK_REV", "service": "rest", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "PGRST_ADMIN_SERVER_HOST", "service": "rest", "description": "Admin server bind address", "secret": false, "strategy": "default", "default": "localhost" }, { "key": "PGRST_ADMIN_SERVER_PORT", "service": "rest", "description": "Internal admin/health port", "secret": false, "strategy": "default", "default": "3001" }, { "key": "PGRST_DB_USE_LEGACY_GUCS", "service": "rest", "description": "Use modern GUC naming", "secret": false, "strategy": "default", "default": "false" }, { "key": "PGRST_APP_SETTINGS_JWT_EXP", "service": "rest", "description": "Exposed to SQL as jwt_exp", "secret": false, "strategy": "default", "default": "3600" }, { "key": "PGRST_DB_EXTRA_SEARCH_PATH", "service": "rest", "description": "Extra schemas on search path", "secret": false, "strategy": "default", "default": "public" }, { "key": "PGRST_APP_SETTINGS_JWT_SECRET", "service": "rest", "description": "Exposed to SQL as jwt_secret", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGDATA", "service": "db", "description": "Cluster dir inside the volume", "secret": false, "strategy": "default", "default": "/var/lib/postgresql/data/pgdata" }, { "key": "PGPORT", "service": "db", "description": "Postgres listen port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "JWT_EXP", "service": "db", "description": "Access token lifetime in seconds", "secret": false, "strategy": "default", "default": "3600" }, { "key": "JWT_SECRET", "service": "db", "description": "Signs all Supabase API JWTs", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PGDATABASE", "service": "db", "description": "Default database name", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "PGPASSWORD", "service": "db", "description": "Password for psql in start command", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "db", "description": "Database created on first boot", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_HOST", "service": "db", "description": "Local socket dir for init scripts", "secret": false, "strategy": "default", "default": "/var/run/postgresql" }, { "key": "POSTGRES_PORT", "service": "db", "description": "Postgres port for consumers", "secret": false, "strategy": "default", "default": "5432" }, { "key": "POSTGRES_USER", "service": "db", "description": "Required superuser name, do not change", "secret": false, "strategy": "default", "default": "supabase_admin" }, { "key": "FORCE_DB_RESET", "service": "db", "description": "Set 1 to wipe and re-init cluster", "secret": false, "strategy": "default", "default": "0" }, { "key": "RAILWAY_RUN_UID", "service": "db", "description": "Root at boot to chown the volume", "secret": false, "strategy": "default", "default": "0" }, { "key": "SECRET_KEY_BASE", "service": "db", "description": "Realtime Phoenix session signing key", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "POSTGRES_PASSWORD", "service": "db", "description": "Password for Supabase service roles", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "SUPABASE_INIT_REV", "service": "db", "description": "Bump to re-run init scripts", "secret": false, "strategy": "default", "default": "3" }, { "key": "SUPABASE_SELFHOST", "service": "db", "description": "Marks stack as self-hosted", "secret": false, "strategy": "default", "default": "true" }, { "key": "DASHBOARD_PASSWORD", "service": "db", "description": "Studio basic-auth password", "secret": true, "strategy": "generate", "generate": "strong_password" }, { "key": "DASHBOARD_USERNAME", "service": "db", "description": "Studio basic-auth username", "secret": false, "strategy": "default", "default": "supabase" }, { "key": "PG_META_CRYPTO_KEY", "service": "db", "description": "postgres-meta credential encryption key", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "REALTIME_DB_ENC_KEY", "service": "db", "description": "Realtime tenant encryption key, 16 chars", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "db", "description": "Provide a value for RAILWAY_DOCKERFILE_PATH.", "secret": false, "strategy": "default", "default": "db/Dockerfile" }, { "key": "S3_PROTOCOL_ACCESS_KEY_ID", "service": "db", "description": "Storage S3-protocol access key id", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "S3_PROTOCOL_ACCESS_KEY_SECRET", "service": "db", "description": "Storage S3-protocol secret key", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PORT", "service": "realtime-dev", "description": "Realtime listen port", "secret": false, "strategy": "default", "default": "4000" }, { "key": "DB_HOST", "service": "realtime-dev", "description": "Private Postgres hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "DB_NAME", "service": "realtime-dev", "description": "Database name", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "DB_PORT", "service": "realtime-dev", "description": "Database port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "DB_USER", "service": "realtime-dev", "description": "Database user", "secret": false, "strategy": "default", "default": "supabase_admin" }, { "key": "APP_NAME", "service": "realtime-dev", "description": "Elixir application name", "secret": false, "strategy": "default", "default": "realtime" }, { "key": "DNS_NODES", "service": "realtime-dev", "description": "No Erlang clustering, single node", "secret": false, "strategy": "default", "default": "''" }, { "key": "DB_ENC_KEY", "service": "realtime-dev", "description": "Encrypts stored tenant records", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ERL_AFLAGS", "service": "realtime-dev", "description": "Erlang distribution over IPv4 TCP", "secret": false, "strategy": "default", "default": "-proto_dist inet_tcp" }, { "key": "DB_PASSWORD", "service": "realtime-dev", "description": "Database password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RUN_JANITOR", "service": "realtime-dev", "description": "Run background cleanup tasks", "secret": false, "strategy": "default", "default": "true" }, { "key": "RLIMIT_NOFILE", "service": "realtime-dev", "description": "Open file descriptor limit", "secret": false, "strategy": "default", "default": "10000" }, { "key": "API_JWT_SECRET", "service": "realtime-dev", "description": "Verifies realtime API tokens", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SEED_SELF_HOST", "service": "realtime-dev", "description": "Seed the realtime-dev tenant on boot", "secret": false, "strategy": "default", "default": "true" }, { "key": "SECRET_KEY_BASE", "service": "realtime-dev", "description": "Phoenix session signing key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "METRICS_JWT_SECRET", "service": "realtime-dev", "description": "Signs the metrics endpoint token", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DB_AFTER_CONNECT_QUERY", "service": "realtime-dev", "description": "Pin schema on each connection", "secret": false, "strategy": "default", "default": "SET search_path TO _realtime" }, { "key": "DISABLE_HEALTHCHECK_LOGGING", "service": "realtime-dev", "description": "Quieten health check log noise", "secret": false, "strategy": "default", "default": "true" }, { "key": "PORT", "service": "meta", "description": "Health check port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "CRYPTO_KEY", "service": "meta", "description": "Encrypts stored connection credentials", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PG_META_PORT", "service": "meta", "description": "Metadata API listen port", "secret": false, "strategy": "default", "default": "8080" }, { "key": "PG_META_DB_HOST", "service": "meta", "description": "Private Postgres hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PG_META_DB_NAME", "service": "meta", "description": "Database name", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "PG_META_DB_PORT", "service": "meta", "description": "Database port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PG_META_DB_USER", "service": "meta", "description": "Database user", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SUPABASE_STACK_REV", "service": "meta", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "PG_META_DB_PASSWORD", "service": "meta", "description": "Database password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PORT", "service": "functions", "description": "Edge runtime listen port", "secret": false, "strategy": "default", "default": "9000" }, { "key": "JWT_SECRET", "service": "functions", "description": "Verifies legacy HS256 function tokens", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "VERIFY_JWT", "service": "functions", "description": "Set true to require a JWT per call", "secret": false, "strategy": "default", "default": "false" }, { "key": "SUPABASE_URL", "service": "functions", "description": "Private gateway address", "secret": false, "strategy": "default", "default": "http://kong.railway.internal:8000" }, { "key": "SUPABASE_DB_URL", "service": "functions", "description": "Database URL available to functions", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SUPABASE_STACK_REV", "service": "functions", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "SUPABASE_PUBLIC_URL", "service": "functions", "description": "Public gateway URL", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "functions", "description": "Provide a value for RAILWAY_DOCKERFILE_PATH.", "secret": false, "strategy": "default", "default": "functions/Dockerfile" }, { "key": "PORT", "service": "studio", "description": "Dashboard listen port", "secret": false, "strategy": "default", "default": "3000" }, { "key": "HOSTNAME", "service": "studio", "description": "Next.js bind address", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "JWT_SECRET", "service": "studio", "description": "Required: derives the anon/service_role API keys", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_DB", "service": "studio", "description": "Database name shown in the UI", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SUPABASE_URL", "service": "studio", "description": "Private gateway address", "secret": false, "strategy": "default", "default": "http://kong.railway.internal:8000" }, { "key": "POSTGRES_HOST", "service": "studio", "description": "Private Postgres hostname", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "studio", "description": "Database port", "secret": false, "strategy": "default", "default": "5432" }, { "key": "AUTH_JWT_SECRET", "service": "studio", "description": "Verifies dashboard API tokens", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGRST_DB_SCHEMAS", "service": "studio", "description": "Mirror of the REST schema list", "secret": false, "strategy": "default", "default": "public,graphql_public" }, { "key": "PGRST_DB_MAX_ROWS", "service": "studio", "description": "Mirror of the REST row limit", "secret": false, "strategy": "default", "default": "1000" }, { "key": "POSTGRES_PASSWORD", "service": "studio", "description": "Database password", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PG_META_CRYPTO_KEY", "service": "studio", "description": "Must match the meta service key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "STUDIO_PG_META_URL", "service": "studio", "description": "Private postgres-meta address", "secret": false, "strategy": "default", "default": "http://meta.railway.internal:8080" }, { "key": "SUPABASE_STACK_REV", "service": "studio", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "SUPABASE_PUBLIC_URL", "service": "studio", "description": "Public API URL shown in the UI", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "DEFAULT_PROJECT_NAME", "service": "studio", "description": "Project label in the UI", "secret": false, "strategy": "default", "default": "Default Project" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "studio", "description": "Provide a value for RAILWAY_DOCKERFILE_PATH.", "secret": false, "strategy": "default", "default": "studio/Dockerfile" }, { "key": "POSTGRES_USER_READ_WRITE", "service": "studio", "description": "Role used by the SQL editor", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "DEFAULT_ORGANIZATION_NAME", "service": "studio", "description": "Organization label in the UI", "secret": false, "strategy": "default", "default": "Default Organization" }, { "key": "ENABLED_FEATURES_LOGS_ALL", "service": "studio", "description": "Hide log views, no analytics service", "secret": false, "strategy": "default", "default": "false" }, { "key": "PGRST_DB_EXTRA_SEARCH_PATH", "service": "studio", "description": "Mirror of the REST search path", "secret": false, "strategy": "default", "default": "public" }, { "key": "PORT", "service": "imgproxy", "description": "Health check port", "secret": false, "strategy": "default", "default": "5001" }, { "key": "IMGPROXY_BIND", "service": "imgproxy", "description": "Listen address inside container", "secret": false, "strategy": "default", "default": ":5001" }, { "key": "IMGPROXY_USE_S3", "service": "imgproxy", "description": "Read source images from S3", "secret": false, "strategy": "default", "default": "true" }, { "key": "AWS_ACCESS_KEY_ID", "service": "imgproxy", "description": "Managed bucket access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "IMGPROXY_USE_ETAG", "service": "imgproxy", "description": "Emit ETag headers for caching", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMGPROXY_AUTO_WEBP", "service": "imgproxy", "description": "Serve WebP when the client accepts it", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMGPROXY_S3_REGION", "service": "imgproxy", "description": "SigV4 signing region", "secret": false, "strategy": "default", "default": "us-east-1" }, { "key": "SUPABASE_STACK_REV", "service": "imgproxy", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "IMGPROXY_S3_ENDPOINT", "service": "imgproxy", "description": "Managed bucket S3 endpoint", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_SECRET_ACCESS_KEY", "service": "imgproxy", "description": "Managed bucket secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "IMGPROXY_MAX_SRC_RESOLUTION", "service": "imgproxy", "description": "Max source megapixels", "secret": false, "strategy": "default", "default": "16.8" }, { "key": "PORT", "service": "storage", "description": "Storage API listen port", "secret": false, "strategy": "default", "default": "5000" }, { "key": "REGION", "service": "storage", "description": "SigV4 signing region", "secret": false, "strategy": "default", "default": "us-east-1" }, { "key": "TENANT_ID", "service": "storage", "description": "Object key namespace prefix", "secret": false, "strategy": "default", "default": "railway" }, { "key": "JWT_SECRET", "service": "storage", "description": "Required: derives the anon/service_role API keys", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SERVER_PORT", "service": "storage", "description": "Internal HTTP server port", "secret": false, "strategy": "default", "default": "5000" }, { "key": "DATABASE_URL", "service": "storage", "description": "Storage metadata connection string", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "IMGPROXY_URL", "service": "storage", "description": "Private imgproxy address", "secret": false, "strategy": "default", "default": "http://imgproxy.railway.internal:5001" }, { "key": "POSTGREST_URL", "service": "storage", "description": "Private PostgREST address", "secret": false, "strategy": "default", "default": "http://rest.railway.internal:3000" }, { "key": "AUTH_JWT_SECRET", "service": "storage", "description": "Verifies incoming API JWTs", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "FILE_SIZE_LIMIT", "service": "storage", "description": "Max upload size, 50 MB", "secret": false, "strategy": "default", "default": "52428800" }, { "key": "STORAGE_BACKEND", "service": "storage", "description": "Store objects in the bucket", "secret": false, "strategy": "default", "default": "s3" }, { "key": "GLOBAL_S3_BUCKET", "service": "storage", "description": "Managed bucket name", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_ACCESS_KEY_ID", "service": "storage", "description": "Managed bucket access key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_ENDPOINT", "service": "storage", "description": "Managed bucket S3 endpoint", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_PROTOCOL", "service": "storage", "description": "Talk to the bucket over HTTPS", "secret": false, "strategy": "default", "default": "https" }, { "key": "STORAGE_PUBLIC_URL", "service": "storage", "description": "Public base URL for object links", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "SUPABASE_STACK_REV", "service": "storage", "description": "Bump to force a redeploy", "secret": false, "strategy": "default", "default": "1" }, { "key": "AWS_SECRET_ACCESS_KEY", "service": "storage", "description": "Managed bucket secret key", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "storage", "description": "Provide a value for RAILWAY_DOCKERFILE_PATH.", "secret": false, "strategy": "default", "default": "storage/Dockerfile" }, { "key": "S3_PROTOCOL_ACCESS_KEY_ID", "service": "storage", "description": "Key id for the S3-compatible API", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_FORCE_PATH_STYLE", "service": "storage", "description": "Use path-style S3 addressing", "secret": false, "strategy": "default", "default": "true" }, { "key": "ENABLE_IMAGE_TRANSFORMATION", "service": "storage", "description": "Enable imgproxy-backed transforms", "secret": false, "strategy": "default", "default": "true" }, { "key": "S3_PROTOCOL_ACCESS_KEY_SECRET", "service": "storage", "description": "Secret for the S3-compatible API", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REQUEST_ALLOW_X_FORWARDED_PATH", "service": "storage", "description": "Trust gateway forwarded path header", "secret": false, "strategy": "default", "default": "true" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "supabase-railway" } }, "cli": "railway deploy --template supabase-railway", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "577ed548-5d45-4f17-a0e2-744269697a38", "serializedConfig": { "buckets": { "534b9a37-c077-4f4c-85c7-8eb90f74b3fb": { "name": "supabase-storage" } }, "services": { "18f749e9-6b64-498b-84a1-a0212c285b83": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "auth", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "supabase/gotrue:v2.189.0" }, "variables": { "PORT": { "isOptional": false, "description": "Health check port", "defaultValue": "9999" }, "GOTRUE_JWT_AUD": { "isOptional": false, "description": "Audience claim for user tokens", "defaultValue": "authenticated" }, "GOTRUE_JWT_EXP": { "isOptional": false, "description": "Access token lifetime in seconds", "defaultValue": "3600" }, "GOTRUE_API_HOST": { "isOptional": false, "description": "Bind address inside container", "defaultValue": "0.0.0.0" }, "GOTRUE_API_PORT": { "isOptional": false, "description": "Auth server listen port", "defaultValue": "9999" }, "GOTRUE_SITE_URL": { "isOptional": false, "description": "Default post-auth redirect target", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}" }, "API_EXTERNAL_URL": { "isOptional": false, "description": "Public auth API base URL", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}/auth/v1" }, "GOTRUE_DB_DRIVER": { "isOptional": false, "description": "Database driver", "defaultValue": "postgres" }, "GOTRUE_JWT_ISSUER": { "isOptional": false, "description": "Issuer claim on issued tokens", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}/auth/v1" }, "GOTRUE_JWT_SECRET": { "isOptional": false, "description": "Shared HS256 signing secret", "defaultValue": "${{db.JWT_SECRET}}" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "GOTRUE_DISABLE_SIGNUP": { "isOptional": false, "description": "Set true to close registration", "defaultValue": "false" }, "GOTRUE_DB_DATABASE_URL": { "isOptional": false, "description": "Auth schema connection string", "defaultValue": "postgres://supabase_auth_admin:${{db.POSTGRES_PASSWORD}}@${{db.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "GOTRUE_JWT_ADMIN_ROLES": { "isOptional": false, "description": "Roles treated as admin", "defaultValue": "service_role" }, "GOTRUE_SMS_AUTOCONFIRM": { "isOptional": false, "description": "Do not auto-confirm phone numbers", "defaultValue": "false" }, "GOTRUE_MAILER_AUTOCONFIRM": { "isOptional": false, "description": "Confirm emails without SMTP", "defaultValue": "true" }, "GOTRUE_EXTERNAL_EMAIL_ENABLED": { "isOptional": false, "description": "Allow email sign-up and sign-in", "defaultValue": "true" }, "GOTRUE_EXTERNAL_PHONE_ENABLED": { "isOptional": false, "description": "Phone auth off, needs SMS provider", "defaultValue": "false" }, "GOTRUE_JWT_DEFAULT_GROUP_NAME": { "isOptional": false, "description": "Default Postgres role for users", "defaultValue": "authenticated" }, "GOTRUE_MAILER_URLPATHS_INVITE": { "isOptional": false, "description": "Invite link path", "defaultValue": "/auth/v1/verify" }, "GOTRUE_MAILER_URLPATHS_RECOVERY": { "isOptional": false, "description": "Password recovery link path", "defaultValue": "/auth/v1/verify" }, "GOTRUE_MAILER_URLPATHS_CONFIRMATION": { "isOptional": false, "description": "Confirmation link path", "defaultValue": "/auth/v1/verify" }, "GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE": { "isOptional": false, "description": "Email change link path", "defaultValue": "/auth/v1/verify" }, "GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED": { "isOptional": false, "description": "Disable anonymous sign-in", "defaultValue": "false" } } }, "3cf1e56a-a8a9-412f-8787-0b7fc182e0ba": { "icon": null, "name": "kong", "deploy": { "startCommand": "", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/supabase-railway", "rootDirectory": "/" }, "variables": { "PORT": { "isOptional": false, "description": "Public gateway listen port", "defaultValue": "8000" }, "JWT_SECRET": { "isOptional": false, "description": "Required: derives the anon/service_role API keys", "defaultValue": "${{db.JWT_SECRET}}" }, "KONG_PLUGINS": { "isOptional": false, "description": "Enabled gateway plugins", "defaultValue": "request-transformer,cors,key-auth,acl,basic-auth,request-termination,ip-restriction,post-function" }, "KONG_DATABASE": { "isOptional": false, "description": "Declarative config, no Kong DB", "defaultValue": "off" }, "KONG_DNS_ORDER": { "isOptional": false, "description": "Resolve private IPv4 and IPv6", "defaultValue": "LAST,A,AAAA,CNAME" }, "DASHBOARD_PASSWORD": { "isOptional": false, "description": "Studio basic-auth password", "defaultValue": "${{db.DASHBOARD_PASSWORD}}" }, "DASHBOARD_USERNAME": { "isOptional": false, "description": "Studio basic-auth username", "defaultValue": "${{db.DASHBOARD_USERNAME}}" }, "KONG_DNS_VALID_TTL": { "isOptional": false, "description": "Re-resolve upstreams every five seconds", "defaultValue": "5" }, "KONG_ROUTER_FLAVOR": { "isOptional": false, "description": "Expression-based route matching", "defaultValue": "expressions" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "2" }, "KONG_PROXY_ACCESS_LOG": { "isOptional": false, "description": "Send access log to platform logs", "defaultValue": "/dev/stdout combined" }, "KONG_DNS_NOT_FOUND_TTL": { "isOptional": false, "description": "Cache negative DNS one second", "defaultValue": "1" }, "KONG_DECLARATIVE_CONFIG": { "isOptional": false, "description": "Path to rendered gateway config", "defaultValue": "/tmp/kong.yml" }, "RAILWAY_DOCKERFILE_PATH": { "defaultValue": "kong/Dockerfile" }, "KONG_NGINX_WORKER_PROCESSES": { "isOptional": false, "description": "Pin workers to container CPU", "defaultValue": "2" }, "KONG_NGINX_PROXY_PROXY_BUFFERS": { "isOptional": false, "description": "Upstream response buffers", "defaultValue": "64 160k" }, "KONG_NGINX_PROXY_PROXY_BUFFER_SIZE": { "isOptional": false, "description": "Upstream header buffer size", "defaultValue": "160k" } }, "networking": { "serviceDomains": { ":8000": { "port": 8000 } } } }, "45682a3d-6b4d-4d47-88bb-571779254ce9": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/postgres.svg", "name": "rest", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "postgrest/postgrest:v14.12" }, "variables": { "PORT": { "isOptional": false, "description": "Health check port", "defaultValue": "3000" }, "PGRST_DB_URI": { "isOptional": false, "description": "Connection string as authenticator role", "defaultValue": "postgres://authenticator:${{db.POSTGRES_PASSWORD}}@${{db.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "PGRST_DB_SCHEMAS": { "isOptional": false, "description": "Schemas exposed over REST", "defaultValue": "public,graphql_public" }, "PGRST_JWT_SECRET": { "isOptional": false, "description": "Verifies incoming API JWTs", "defaultValue": "${{db.JWT_SECRET}}" }, "PGRST_DB_MAX_ROWS": { "isOptional": false, "description": "Max rows returned per request", "defaultValue": "1000" }, "PGRST_SERVER_HOST": { "isOptional": false, "description": "Listen on all interfaces", "defaultValue": "*" }, "PGRST_SERVER_PORT": { "isOptional": false, "description": "REST API listen port", "defaultValue": "3000" }, "PGRST_DB_ANON_ROLE": { "isOptional": false, "description": "Role used for unauthenticated requests", "defaultValue": "anon" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "PGRST_ADMIN_SERVER_HOST": { "isOptional": false, "description": "Admin server bind address", "defaultValue": "localhost" }, "PGRST_ADMIN_SERVER_PORT": { "isOptional": false, "description": "Internal admin/health port", "defaultValue": "3001" }, "PGRST_DB_USE_LEGACY_GUCS": { "isOptional": false, "description": "Use modern GUC naming", "defaultValue": "false" }, "PGRST_APP_SETTINGS_JWT_EXP": { "isOptional": false, "description": "Exposed to SQL as jwt_exp", "defaultValue": "3600" }, "PGRST_DB_EXTRA_SEARCH_PATH": { "isOptional": false, "description": "Extra schemas on search path", "defaultValue": "public" }, "PGRST_APP_SETTINGS_JWT_SECRET": { "isOptional": false, "description": "Exposed to SQL as jwt_secret", "defaultValue": "${{db.JWT_SECRET}}" } } }, "491bbb42-557e-4fe3-8028-5251036d9162": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "db", "source": { "repo": "gridalpha/supabase-railway", "branch": null, "rootDirectory": null }, "variables": { "PGDATA": { "description": "Cluster dir inside the volume", "defaultValue": "/var/lib/postgresql/data/pgdata" }, "PGPORT": { "description": "Postgres listen port", "defaultValue": "5432" }, "JWT_EXP": { "description": "Access token lifetime in seconds", "defaultValue": "3600" }, "ANON_KEY": { "isOptional": true, "description": "Optional override; derived from JWT_SECRET when blank", "defaultValue": "" }, "JWT_SECRET": { "description": "Signs all Supabase API JWTs", "defaultValue": "{{JWT_SECRET}}" }, "PGDATABASE": { "description": "Default database name", "defaultValue": "postgres" }, "PGPASSWORD": { "description": "Password for psql in start command", "defaultValue": "${{db.POSTGRES_PASSWORD}}" }, "POSTGRES_DB": { "description": "Database created on first boot", "defaultValue": "postgres" }, "POSTGRES_HOST": { "description": "Local socket dir for init scripts", "defaultValue": "/var/run/postgresql" }, "POSTGRES_PORT": { "description": "Postgres port for consumers", "defaultValue": "5432" }, "POSTGRES_USER": { "description": "Required superuser name, do not change", "defaultValue": "supabase_admin" }, "FORCE_DB_RESET": { "description": "Set 1 to wipe and re-init cluster", "defaultValue": "0" }, "RAILWAY_RUN_UID": { "description": "Root at boot to chown the volume", "defaultValue": "0" }, "SECRET_KEY_BASE": { "description": "Realtime Phoenix session signing key", "defaultValue": "{{SECRET_KEY_BASE}}" }, "SERVICE_ROLE_KEY": { "isOptional": true, "description": "Optional override; derived from JWT_SECRET when blank", "defaultValue": "" }, "POSTGRES_PASSWORD": { "description": "Password for Supabase service roles", "defaultValue": "{{POSTGRES_PASSWORD}}" }, "SUPABASE_INIT_REV": { "description": "Bump to re-run init scripts", "defaultValue": "3" }, "SUPABASE_SELFHOST": { "description": "Marks stack as self-hosted", "defaultValue": "true" }, "DASHBOARD_PASSWORD": { "description": "Studio basic-auth password", "defaultValue": "{{DASHBOARD_PASSWORD}}" }, "DASHBOARD_USERNAME": { "description": "Studio basic-auth username", "defaultValue": "supabase" }, "PG_META_CRYPTO_KEY": { "description": "postgres-meta credential encryption key", "defaultValue": "{{PG_META_CRYPTO_KEY}}" }, "REALTIME_DB_ENC_KEY": { "description": "Realtime tenant encryption key, 16 chars", "defaultValue": "{{REALTIME_DB_ENC_KEY}}" }, "RAILWAY_DOCKERFILE_PATH": { "defaultValue": "db/Dockerfile" }, "S3_PROTOCOL_ACCESS_KEY_ID": { "description": "Storage S3-protocol access key id", "defaultValue": "{{S3_PROTOCOL_ACCESS_KEY_ID}}" }, "S3_PROTOCOL_ACCESS_KEY_SECRET": { "description": "Storage S3-protocol secret key", "defaultValue": "{{S3_PROTOCOL_ACCESS_KEY_SECRET}}" } }, "volumeMounts": { "491bbb42-557e-4fe3-8028-5251036d9162": { "mountPath": "/var/lib/postgresql/data" } } }, "6e63fa33-5475-4d45-a654-b141f05c21c0": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "realtime-dev", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "supabase/realtime:v2.102.3" }, "variables": { "PORT": { "isOptional": false, "description": "Realtime listen port", "defaultValue": "4000" }, "DB_HOST": { "isOptional": false, "description": "Private Postgres hostname", "defaultValue": "${{db.RAILWAY_PRIVATE_DOMAIN}}" }, "DB_NAME": { "isOptional": false, "description": "Database name", "defaultValue": "postgres" }, "DB_PORT": { "isOptional": false, "description": "Database port", "defaultValue": "5432" }, "DB_USER": { "isOptional": false, "description": "Database user", "defaultValue": "supabase_admin" }, "APP_NAME": { "isOptional": false, "description": "Elixir application name", "defaultValue": "realtime" }, "DNS_NODES": { "isOptional": false, "description": "No Erlang clustering, single node", "defaultValue": "''" }, "DB_ENC_KEY": { "isOptional": false, "description": "Encrypts stored tenant records", "defaultValue": "${{db.REALTIME_DB_ENC_KEY}}" }, "ERL_AFLAGS": { "isOptional": false, "description": "Erlang distribution over IPv4 TCP", "defaultValue": "-proto_dist inet_tcp" }, "DB_PASSWORD": { "isOptional": false, "description": "Database password", "defaultValue": "${{db.POSTGRES_PASSWORD}}" }, "RUN_JANITOR": { "isOptional": false, "description": "Run background cleanup tasks", "defaultValue": "true" }, "RLIMIT_NOFILE": { "isOptional": false, "description": "Open file descriptor limit", "defaultValue": "10000" }, "API_JWT_SECRET": { "isOptional": false, "description": "Verifies realtime API tokens", "defaultValue": "${{db.JWT_SECRET}}" }, "SEED_SELF_HOST": { "isOptional": false, "description": "Seed the realtime-dev tenant on boot", "defaultValue": "true" }, "SECRET_KEY_BASE": { "isOptional": false, "description": "Phoenix session signing key", "defaultValue": "${{db.SECRET_KEY_BASE}}" }, "METRICS_JWT_SECRET": { "isOptional": false, "description": "Signs the metrics endpoint token", "defaultValue": "${{db.JWT_SECRET}}" }, "DB_AFTER_CONNECT_QUERY": { "isOptional": false, "description": "Pin schema on each connection", "defaultValue": "SET search_path TO _realtime" }, "DISABLE_HEALTHCHECK_LOGGING": { "isOptional": false, "description": "Quieten health check log noise", "defaultValue": "true" } } }, "7e2412e7-a704-4f4f-aab0-6257321f628e": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "meta", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "supabase/postgres-meta:v0.96.6" }, "variables": { "PORT": { "isOptional": false, "description": "Health check port", "defaultValue": "8080" }, "CRYPTO_KEY": { "isOptional": false, "description": "Encrypts stored connection credentials", "defaultValue": "${{db.PG_META_CRYPTO_KEY}}" }, "PG_META_PORT": { "isOptional": false, "description": "Metadata API listen port", "defaultValue": "8080" }, "PG_META_DB_HOST": { "isOptional": false, "description": "Private Postgres hostname", "defaultValue": "${{db.RAILWAY_PRIVATE_DOMAIN}}" }, "PG_META_DB_NAME": { "isOptional": false, "description": "Database name", "defaultValue": "postgres" }, "PG_META_DB_PORT": { "isOptional": false, "description": "Database port", "defaultValue": "5432" }, "PG_META_DB_USER": { "isOptional": false, "description": "Database user", "defaultValue": "postgres" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "PG_META_DB_PASSWORD": { "isOptional": false, "description": "Database password", "defaultValue": "${{db.POSTGRES_PASSWORD}}" } } }, "aea6d69c-ec4c-489b-a805-af3f79faee7c": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "functions", "deploy": { "startCommand": "", "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/supabase-railway", "rootDirectory": "/" }, "variables": { "PORT": { "isOptional": false, "description": "Edge runtime listen port", "defaultValue": "9000" }, "JWT_SECRET": { "isOptional": false, "description": "Verifies legacy HS256 function tokens", "defaultValue": "${{db.JWT_SECRET}}" }, "VERIFY_JWT": { "isOptional": false, "description": "Set true to require a JWT per call", "defaultValue": "false" }, "SUPABASE_URL": { "isOptional": false, "description": "Private gateway address", "defaultValue": "http://kong.railway.internal:8000" }, "SUPABASE_DB_URL": { "isOptional": false, "description": "Database URL available to functions", "defaultValue": "postgresql://postgres:${{db.POSTGRES_PASSWORD}}@${{db.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "SUPABASE_PUBLIC_URL": { "isOptional": false, "description": "Public gateway URL", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}" }, "RAILWAY_DOCKERFILE_PATH": { "defaultValue": "functions/Dockerfile" } } }, "bed7c747-f37b-49ef-a998-0460e444e3a3": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "studio", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/supabase-railway", "rootDirectory": "/" }, "variables": { "PORT": { "isOptional": false, "description": "Dashboard listen port", "defaultValue": "3000" }, "HOSTNAME": { "isOptional": false, "description": "Next.js bind address", "defaultValue": "0.0.0.0" }, "JWT_SECRET": { "isOptional": false, "description": "Required: derives the anon/service_role API keys", "defaultValue": "${{db.JWT_SECRET}}" }, "POSTGRES_DB": { "isOptional": false, "description": "Database name shown in the UI", "defaultValue": "postgres" }, "SUPABASE_URL": { "isOptional": false, "description": "Private gateway address", "defaultValue": "http://kong.railway.internal:8000" }, "POSTGRES_HOST": { "isOptional": false, "description": "Private Postgres hostname", "defaultValue": "${{db.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "isOptional": false, "description": "Database port", "defaultValue": "5432" }, "AUTH_JWT_SECRET": { "isOptional": false, "description": "Verifies dashboard API tokens", "defaultValue": "${{db.JWT_SECRET}}" }, "PGRST_DB_SCHEMAS": { "isOptional": false, "description": "Mirror of the REST schema list", "defaultValue": "public,graphql_public" }, "PGRST_DB_MAX_ROWS": { "isOptional": false, "description": "Mirror of the REST row limit", "defaultValue": "1000" }, "POSTGRES_PASSWORD": { "isOptional": false, "description": "Database password", "defaultValue": "${{db.POSTGRES_PASSWORD}}" }, "PG_META_CRYPTO_KEY": { "isOptional": false, "description": "Must match the meta service key", "defaultValue": "${{db.PG_META_CRYPTO_KEY}}" }, "STUDIO_PG_META_URL": { "isOptional": false, "description": "Private postgres-meta address", "defaultValue": "http://meta.railway.internal:8080" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "SUPABASE_PUBLIC_URL": { "isOptional": false, "description": "Public API URL shown in the UI", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}" }, "DEFAULT_PROJECT_NAME": { "isOptional": false, "description": "Project label in the UI", "defaultValue": "Default Project" }, "RAILWAY_DOCKERFILE_PATH": { "defaultValue": "studio/Dockerfile" }, "POSTGRES_USER_READ_WRITE": { "isOptional": false, "description": "Role used by the SQL editor", "defaultValue": "postgres" }, "DEFAULT_ORGANIZATION_NAME": { "isOptional": false, "description": "Organization label in the UI", "defaultValue": "Default Organization" }, "ENABLED_FEATURES_LOGS_ALL": { "isOptional": false, "description": "Hide log views, no analytics service", "defaultValue": "false" }, "PGRST_DB_EXTRA_SEARCH_PATH": { "isOptional": false, "description": "Mirror of the REST search path", "defaultValue": "public" } } }, "dee2a3f2-8cf9-492e-989f-bca72358b605": { "icon": "https://res.cloudinary.com/rroe4rtk/image/upload/v1786168700/f6f52fc9-5305-43ae-9557-13d1ec7c7d92.png", "name": "imgproxy", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "image": "darthsim/imgproxy:v3.30.1" }, "variables": { "PORT": { "isOptional": false, "description": "Health check port", "defaultValue": "5001" }, "IMGPROXY_BIND": { "isOptional": false, "description": "Listen address inside container", "defaultValue": ":5001" }, "IMGPROXY_USE_S3": { "isOptional": false, "description": "Read source images from S3", "defaultValue": "true" }, "AWS_ACCESS_KEY_ID": { "isOptional": false, "description": "Managed bucket access key", "defaultValue": "${{supabase-storage.ACCESS_KEY_ID}}" }, "IMGPROXY_USE_ETAG": { "isOptional": false, "description": "Emit ETag headers for caching", "defaultValue": "true" }, "IMGPROXY_AUTO_WEBP": { "isOptional": false, "description": "Serve WebP when the client accepts it", "defaultValue": "true" }, "IMGPROXY_S3_REGION": { "isOptional": false, "description": "SigV4 signing region", "defaultValue": "us-east-1" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "IMGPROXY_S3_ENDPOINT": { "isOptional": false, "description": "Managed bucket S3 endpoint", "defaultValue": "${{supabase-storage.ENDPOINT}}" }, "AWS_SECRET_ACCESS_KEY": { "isOptional": false, "description": "Managed bucket secret key", "defaultValue": "${{supabase-storage.SECRET_ACCESS_KEY}}" }, "IMGPROXY_MAX_SRC_RESOLUTION": { "isOptional": false, "description": "Max source megapixels", "defaultValue": "16.8" } } }, "fe849e78-b409-43b8-b702-6d4e0da5e20b": { "icon": "https://cdn.jsdelivr.net/gh/homarr-labs/dashboard-icons/svg/supabase.svg", "name": "storage", "deploy": { "startCommand": null, "healthcheckPath": null, "restartPolicyType": "ON_FAILURE", "restartPolicyMaxRetries": 10 }, "source": { "repo": "https://github.com/gridalpha/supabase-railway", "rootDirectory": "/" }, "variables": { "PORT": { "isOptional": false, "description": "Storage API listen port", "defaultValue": "5000" }, "REGION": { "isOptional": false, "description": "SigV4 signing region", "defaultValue": "us-east-1" }, "TENANT_ID": { "isOptional": false, "description": "Object key namespace prefix", "defaultValue": "railway" }, "JWT_SECRET": { "isOptional": false, "description": "Required: derives the anon/service_role API keys", "defaultValue": "${{db.JWT_SECRET}}" }, "SERVER_PORT": { "isOptional": false, "description": "Internal HTTP server port", "defaultValue": "5000" }, "DATABASE_URL": { "isOptional": false, "description": "Storage metadata connection string", "defaultValue": "postgres://supabase_storage_admin:${{db.POSTGRES_PASSWORD}}@${{db.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "IMGPROXY_URL": { "isOptional": false, "description": "Private imgproxy address", "defaultValue": "http://imgproxy.railway.internal:5001" }, "POSTGREST_URL": { "isOptional": false, "description": "Private PostgREST address", "defaultValue": "http://rest.railway.internal:3000" }, "AUTH_JWT_SECRET": { "isOptional": false, "description": "Verifies incoming API JWTs", "defaultValue": "${{db.JWT_SECRET}}" }, "FILE_SIZE_LIMIT": { "isOptional": false, "description": "Max upload size, 50 MB", "defaultValue": "52428800" }, "STORAGE_BACKEND": { "isOptional": false, "description": "Store objects in the bucket", "defaultValue": "s3" }, "GLOBAL_S3_BUCKET": { "isOptional": false, "description": "Managed bucket name", "defaultValue": "${{supabase-storage.BUCKET}}" }, "AWS_ACCESS_KEY_ID": { "isOptional": false, "description": "Managed bucket access key", "defaultValue": "${{supabase-storage.ACCESS_KEY_ID}}" }, "GLOBAL_S3_ENDPOINT": { "isOptional": false, "description": "Managed bucket S3 endpoint", "defaultValue": "${{supabase-storage.ENDPOINT}}" }, "GLOBAL_S3_PROTOCOL": { "isOptional": false, "description": "Talk to the bucket over HTTPS", "defaultValue": "https" }, "STORAGE_PUBLIC_URL": { "isOptional": false, "description": "Public base URL for object links", "defaultValue": "https://${{kong.RAILWAY_PUBLIC_DOMAIN}}" }, "SUPABASE_STACK_REV": { "isOptional": false, "description": "Bump to force a redeploy", "defaultValue": "1" }, "AWS_SECRET_ACCESS_KEY": { "isOptional": false, "description": "Managed bucket secret key", "defaultValue": "${{supabase-storage.SECRET_ACCESS_KEY}}" }, "RAILWAY_DOCKERFILE_PATH": { "defaultValue": "storage/Dockerfile" }, "S3_PROTOCOL_ACCESS_KEY_ID": { "isOptional": false, "description": "Key id for the S3-compatible API", "defaultValue": "${{db.S3_PROTOCOL_ACCESS_KEY_ID}}" }, "GLOBAL_S3_FORCE_PATH_STYLE": { "isOptional": false, "description": "Use path-style S3 addressing", "defaultValue": "true" }, "ENABLE_IMAGE_TRANSFORMATION": { "isOptional": false, "description": "Enable imgproxy-backed transforms", "defaultValue": "true" }, "S3_PROTOCOL_ACCESS_KEY_SECRET": { "isOptional": false, "description": "Secret for the S3-compatible API", "defaultValue": "${{db.S3_PROTOCOL_ACCESS_KEY_SECRET}}" }, "REQUEST_ALLOW_X_FORWARDED_PATH": { "isOptional": false, "description": "Trust gateway forwarded path header", "defaultValue": "true" } } } } } } } } } }, "post_deploy": {}, "resources": { "expected_services": 10, "needs_volume": true }, "generated_at": "2026-09-10T16:14:52.212Z", "generator_version": "0.1.0", "status": "degraded", "validated_at": "2026-09-05T06:34:03.683Z", "success_rate_30d": 0, "validation": { "last_run_id": "run_7b209a1813074fecbf9c", "checks": [ { "name": "workflow_completed", "passed": true }, { "name": "all_services_deployed", "passed": true }, { "name": "stays_up", "passed": false, "detail": "1 service(s) crashed within 30s" } ] } }