{ "manifest_version": "1.0.0", "template": { "id": "a309c92e-d4cc-4e63-be05-12486de81bc1", "slug": "supabase-self-hosted", "name": "Supabase Self-Hosted", "description": "Full Supabase stack in one click: database, auth, storage, Studio", "url": "https://railway.com/deploy/supabase-self-hosted", "upstream": { "repo_url": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" } }, "status": "unvalidated", "validated_at": null, "success_rate_30d": null, "services": [ { "name": "Postgres", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": true, "volume_mount_path": "/var/lib/postgresql/data", "http": false }, { "name": "Realtime", "source": { "image": "supabase/realtime:v2.143.3" }, "needs_volume": false, "http": false }, { "name": "Gateway", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": false, "http": true }, { "name": "REST", "source": { "image": "postgrest/postgrest:v14.18" }, "needs_volume": false, "http": false }, { "name": "Functions", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": false, "http": false }, { "name": "Storage", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": false, "http": false }, { "name": "Imgproxy", "source": { "image": "darthsim/imgproxy:v3.31.4" }, "needs_volume": false, "http": false }, { "name": "Meta", "source": { "image": "supabase/postgres-meta:v0.100.0" }, "needs_volume": false, "http": false }, { "name": "Supavisor", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": false, "http": false }, { "name": "Auth", "source": { "image": "supabase/gotrue:v2.197.0" }, "needs_volume": false, "http": false }, { "name": "Studio", "source": { "repo": "https://github.com/AdeelAhmedKhan/supabase-selfhost-railway" }, "needs_volume": true, "volume_mount_path": "/app/snippets", "http": false } ], "required_inputs": [ { "key": "PGPORT", "service": "Postgres", "description": "Port Postgres listens on inside its private network.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "JWT_EXP", "service": "Postgres", "description": "Lifetime in seconds for Postgres-related JWT tokens.", "secret": false, "strategy": "default", "default": "3600" }, { "key": "PGDATABASE", "service": "Postgres", "description": "Default database name used by Postgres clients.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_DB", "service": "Postgres", "description": "Initial database created by Postgres on first start.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "POSTGRES_HOST", "service": "Postgres", "description": "Socket directory Postgres listens on inside the container.", "secret": false, "strategy": "default", "default": "/var/run/postgresql" }, { "key": "POSTGRES_PORT", "service": "Postgres", "description": "Port Postgres listens on inside its private network.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PGSODIUM_ROOT_KEY", "service": "Postgres", "description": "Root key for Postgres column encryption, generated at deploy time.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POSTGRES_PASSWORD", "service": "Postgres", "description": "Password for the Postgres database, generated at deploy time.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Postgres", "description": "Path to the Postgres Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/db/Dockerfile" }, { "key": "PORT", "service": "Realtime", "description": "Port Realtime listens on.", "secret": false, "strategy": "default", "default": "4000" }, { "key": "DB_HOST", "service": "Realtime", "description": "Private domain of the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "DB_NAME", "service": "Realtime", "description": "Database name Realtime connects to.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "DB_PORT", "service": "Realtime", "description": "Port Realtime uses to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "DB_USER", "service": "Realtime", "description": "Database user Realtime connects as.", "secret": false, "strategy": "default", "default": "supabase_admin" }, { "key": "APP_NAME", "service": "Realtime", "description": "Application name for Realtime.", "secret": false, "strategy": "default", "default": "realtime" }, { "key": "DNS_NODES", "service": "Realtime", "description": "List of DNS nodes for Realtime clustering, left empty.", "secret": false, "strategy": "ask_user" }, { "key": "DB_ENC_KEY", "service": "Realtime", "description": "Encryption key for Realtime database, from Realtime.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "ERL_AFLAGS", "service": "Realtime", "description": "Erlang runtime flags for Realtime.", "secret": false, "strategy": "default", "default": "-proto_dist inet_tcp" }, { "key": "DB_PASSWORD", "service": "Realtime", "description": "Password Realtime uses to connect to Postgres, from Postgres.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RUN_JANITOR", "service": "Realtime", "description": "Whether Realtime runs the janitor process.", "secret": false, "strategy": "default", "default": "true" }, { "key": "RLIMIT_NOFILE", "service": "Realtime", "description": "Maximum open files limit for Realtime.", "secret": false, "strategy": "default", "default": "10000" }, { "key": "API_JWT_SECRET", "service": "Realtime", "description": "JWT secret shared from Gateway, used to verify API tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SEED_SELF_HOST", "service": "Realtime", "description": "Whether Realtime seeds self-host configuration.", "secret": false, "strategy": "default", "default": "true" }, { "key": "SECRET_KEY_BASE", "service": "Realtime", "description": "Secret key base for Realtime, generated at deploy time.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "METRICS_JWT_SECRET", "service": "Realtime", "description": "JWT secret shared from Gateway, used to verify metrics.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REALTIME_DB_ENC_KEY", "service": "Realtime", "description": "Encryption key for Realtime database, 16 hex characters, generated at deploy time.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DB_AFTER_CONNECT_QUERY", "service": "Realtime", "description": "Query run after Realtime connects to the database.", "secret": false, "strategy": "default", "default": "SET search_path TO _realtime" }, { "key": "DISABLE_HEALTHCHECK_LOGGING", "service": "Realtime", "description": "Whether Realtime disables healthcheck logging.", "secret": false, "strategy": "default", "default": "true" }, { "key": "PORT", "service": "Gateway", "description": "Port the Gateway listens on for public traffic.", "secret": false, "strategy": "default", "default": "8000" }, { "key": "AUTH_HOST", "service": "Gateway", "description": "Private domain of the Auth service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "META_HOST", "service": "Gateway", "description": "Private domain of the Meta service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REST_HOST", "service": "Gateway", "description": "Private domain of the REST service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "JWT_SECRET", "service": "Gateway", "description": "JWT secret generated at deploy time, shared across services.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "STUDIO_HOST", "service": "Gateway", "description": "Private domain of the Studio service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "STORAGE_HOST", "service": "Gateway", "description": "Private domain of the Storage service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "REALTIME_HOST", "service": "Gateway", "description": "Private domain of the Realtime service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "FUNCTIONS_HOST", "service": "Gateway", "description": "Private domain of the Functions service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "DASHBOARD_PASSWORD", "service": "Gateway", "description": "Password for the Gateway dashboard, generated at deploy time.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "DASHBOARD_USERNAME", "service": "Gateway", "description": "Username for the Gateway dashboard.", "secret": false, "strategy": "default", "default": "supabase" }, { "key": "ANON_KEY_ASYMMETRIC", "service": "Gateway", "description": "Anonymous key in asymmetric format, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "SUPABASE_PUBLIC_URL", "service": "Gateway", "description": "Public URL of the Supabase Gateway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "SUPABASE_SECRET_KEY", "service": "Gateway", "description": "Secret key, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Gateway", "description": "Path to the Gateway Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/gateway/Dockerfile" }, { "key": "SUPABASE_PUBLISHABLE_KEY", "service": "Gateway", "description": "Publishable key, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "SERVICE_ROLE_KEY_ASYMMETRIC", "service": "Gateway", "description": "Service role key in asymmetric format, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PGRST_DB_URI", "service": "REST", "description": "Postgres connection string for the REST API.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PGRST_DB_SCHEMAS", "service": "REST", "description": "Database schemas exposed by the REST API.", "secret": false, "strategy": "default", "default": "public,graphql_public" }, { "key": "PGRST_JWT_SECRET", "service": "REST", "description": "JWT secret shared from Gateway, used to verify tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGRST_DB_MAX_ROWS", "service": "REST", "description": "Maximum rows returned by a single REST query.", "secret": false, "strategy": "default", "default": "1000" }, { "key": "PGRST_DB_ANON_ROLE", "service": "REST", "description": "Postgres role used for anonymous REST requests.", "secret": false, "strategy": "default", "default": "anon" }, { "key": "PGRST_ADMIN_SERVER_HOST", "service": "REST", "description": "Host the REST admin server listens on.", "secret": false, "strategy": "default", "default": "localhost" }, { "key": "PGRST_ADMIN_SERVER_PORT", "service": "REST", "description": "Port the REST admin server listens on.", "secret": false, "strategy": "default", "default": "3001" }, { "key": "PGRST_DB_USE_LEGACY_GUCS", "service": "REST", "description": "Whether to use legacy Postgres configuration settings.", "secret": false, "strategy": "default", "default": "false" }, { "key": "PGRST_APP_SETTINGS_JWT_EXP", "service": "REST", "description": "Lifetime in seconds for REST JWT settings.", "secret": false, "strategy": "default", "default": "3600" }, { "key": "PGRST_DB_EXTRA_SEARCH_PATH", "service": "REST", "description": "Extra Postgres search path for REST queries.", "secret": false, "strategy": "default", "default": "public" }, { "key": "JWT_SECRET", "service": "Functions", "description": "JWT secret shared from Gateway, used to verify tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "VERIFY_JWT", "service": "Functions", "description": "Whether Functions verifies JWTs on incoming requests.", "secret": false, "strategy": "default", "default": "false" }, { "key": "SUPABASE_URL", "service": "Functions", "description": "Internal URL of the Supabase Gateway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SUPABASE_DB_URL", "service": "Functions", "description": "Postgres connection string for Functions.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SUPABASE_PUBLIC_URL", "service": "Functions", "description": "Public URL of the Supabase Gateway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "SUPABASE_SECRET_KEYS", "service": "Functions", "description": "Secret keys map for Functions, with a default empty key.", "secret": true, "strategy": "default", "default": "{\"default\":\"\"}" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Functions", "description": "Path to the Functions Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/functions/Dockerfile" }, { "key": "SUPABASE_PUBLISHABLE_KEYS", "service": "Functions", "description": "Publishable keys map for Functions, with a default empty key.", "secret": true, "strategy": "default", "default": "{\"default\":\"\"}" }, { "key": "REGION", "service": "Storage", "description": "Region of the Storage Bucket, from StorageBucket.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "TENANT_ID", "service": "Storage", "description": "Tenant ID for Storage.", "secret": false, "strategy": "default", "default": "stub" }, { "key": "DATABASE_URL", "service": "Storage", "description": "Postgres connection string for Storage.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "IMGPROXY_URL", "service": "Storage", "description": "Internal URL of Imgproxy for image transformation.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGREST_URL", "service": "Storage", "description": "Internal URL of the REST service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "AUTH_JWT_SECRET", "service": "Storage", "description": "JWT secret shared from Gateway, used to verify tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "FILE_SIZE_LIMIT", "service": "Storage", "description": "Maximum file size in bytes for Storage uploads.", "secret": false, "strategy": "default", "default": "52428800" }, { "key": "STORAGE_BACKEND", "service": "Storage", "description": "Backend used by Storage.", "secret": false, "strategy": "default", "default": "s3" }, { "key": "GLOBAL_S3_BUCKET", "service": "Storage", "description": "Bucket name from StorageBucket.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "AWS_ACCESS_KEY_ID", "service": "Storage", "description": "Access key ID from StorageBucket.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_ENDPOINT", "service": "Storage", "description": "S3 endpoint from StorageBucket.", "secret": false, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_PROTOCOL", "service": "Storage", "description": "Protocol for S3 connections.", "secret": false, "strategy": "default", "default": "https" }, { "key": "STORAGE_PUBLIC_URL", "service": "Storage", "description": "Public URL of the Supabase Gateway for Storage.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "AWS_SECRET_ACCESS_KEY", "service": "Storage", "description": "Secret access key from StorageBucket.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Storage", "description": "Path to the Storage Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/storage/Dockerfile" }, { "key": "FILE_STORAGE_BACKEND_PATH", "service": "Storage", "description": "Path where Storage files are stored.", "secret": false, "strategy": "default", "default": "/var/lib/storage" }, { "key": "S3_PROTOCOL_ACCESS_KEY_ID", "service": "Storage", "description": "Access key ID for S3 protocol, generated at deploy time.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GLOBAL_S3_FORCE_PATH_STYLE", "service": "Storage", "description": "Whether Storage forces path-style S3 URLs.", "secret": false, "strategy": "default", "default": "false" }, { "key": "ENABLE_IMAGE_TRANSFORMATION", "service": "Storage", "description": "Whether Storage enables image transformation.", "secret": false, "strategy": "default", "default": "true" }, { "key": "S3_PROTOCOL_ACCESS_KEY_SECRET", "service": "Storage", "description": "Secret access key for S3 protocol, generated at deploy time.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "REQUEST_ALLOW_X_FORWARDED_PATH", "service": "Storage", "description": "Whether Storage allows X-Forwarded-Path headers.", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMGPROXY_BIND", "service": "Imgproxy", "description": "Address and port Imgproxy listens on for image requests.", "secret": false, "strategy": "default", "default": ":5001" }, { "key": "IMGPROXY_USE_ETAG", "service": "Imgproxy", "description": "Whether Imgproxy sends ETag headers for cached images.", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMGPROXY_AUTO_WEBP", "service": "Imgproxy", "description": "Whether Imgproxy automatically serves WebP images when supported.", "secret": false, "strategy": "default", "default": "true" }, { "key": "IMGPROXY_MAX_SRC_RESOLUTION", "service": "Imgproxy", "description": "Maximum resolution in megapixels for source images.", "secret": false, "strategy": "default", "default": "16.8" }, { "key": "IMGPROXY_LOCAL_FILESYSTEM_ROOT", "service": "Imgproxy", "description": "Root directory Imgproxy uses for local files.", "secret": false, "strategy": "default", "default": "/" }, { "key": "PG_META_PORT", "service": "Meta", "description": "Port the Postgres Meta API listens on.", "secret": false, "strategy": "default", "default": "8080" }, { "key": "PG_META_DB_HOST", "service": "Meta", "description": "Private domain of the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "PG_META_DB_NAME", "service": "Meta", "description": "Database name Meta connects to.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "PG_META_DB_PORT", "service": "Meta", "description": "Port Meta uses to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "PG_META_DB_USER", "service": "Meta", "description": "Database user Meta connects as.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "PG_META_CRYPTO_KEY", "service": "Meta", "description": "Encryption key for Postgres Meta, generated at deploy time.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "PG_META_DB_PASSWORD", "service": "Meta", "description": "Password Meta uses to connect to Postgres, from Postgres.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PORT", "service": "Supavisor", "description": "Port Supavisor listens on.", "secret": false, "strategy": "default", "default": "4000" }, { "key": "REGION", "service": "Supavisor", "description": "Region label for Supavisor.", "secret": false, "strategy": "default", "default": "local" }, { "key": "ERL_AFLAGS", "service": "Supavisor", "description": "Erlang runtime flags for Supavisor.", "secret": false, "strategy": "default", "default": "-proto_dist inet_tcp" }, { "key": "POSTGRES_DB", "service": "Supavisor", "description": "Database name Supavisor connects to.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "DATABASE_URL", "service": "Supavisor", "description": "Postgres connection string for Supavisor.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "DB_POOL_SIZE", "service": "Supavisor", "description": "Database pool size for Supavisor.", "secret": false, "strategy": "default", "default": "5" }, { "key": "POSTGRES_HOST", "service": "Supavisor", "description": "Private domain of the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "Supavisor", "description": "Port Supavisor uses to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "VAULT_ENC_KEY", "service": "Supavisor", "description": "Encryption key for Supavisor vault, 64 characters, generated at deploy time.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "API_JWT_SECRET", "service": "Supavisor", "description": "JWT secret shared from Gateway, used to verify API tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "SECRET_KEY_BASE", "service": "Supavisor", "description": "Secret key base shared from Realtime.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "CLUSTER_POSTGRES", "service": "Supavisor", "description": "Whether Supavisor clusters Postgres.", "secret": false, "strategy": "default", "default": "true" }, { "key": "POOLER_POOL_MODE", "service": "Supavisor", "description": "Pool mode for the Supavisor pooler.", "secret": false, "strategy": "default", "default": "transaction" }, { "key": "POOLER_TENANT_ID", "service": "Supavisor", "description": "Tenant ID for the Supavisor pooler.", "secret": false, "strategy": "default", "default": "supabase" }, { "key": "POSTGRES_PASSWORD", "service": "Supavisor", "description": "Password Supavisor uses to connect to Postgres, from Postgres.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "METRICS_JWT_SECRET", "service": "Supavisor", "description": "JWT secret shared from Gateway, used to verify metrics.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "POOLER_MAX_CLIENT_CONN", "service": "Supavisor", "description": "Maximum client connections for the Supavisor pooler.", "secret": false, "strategy": "default", "default": "100" }, { "key": "POOLER_URL_TRANSACTION", "service": "Supavisor", "description": "Transaction pooler connection string for Supavisor.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Supavisor", "description": "Path to the Supavisor Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/supavisor/Dockerfile" }, { "key": "POOLER_DEFAULT_POOL_SIZE", "service": "Supavisor", "description": "Default pool size for the Supavisor pooler.", "secret": false, "strategy": "default", "default": "20" }, { "key": "GOTRUE_DB_HOST", "service": "Auth", "description": "Private domain of the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "GOTRUE_DB_PORT", "service": "Auth", "description": "Port Auth uses to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "GOTRUE_DB_USER", "service": "Auth", "description": "Database user Auth connects as.", "secret": false, "strategy": "default", "default": "supabase_auth_admin" }, { "key": "GOTRUE_JWT_AUD", "service": "Auth", "description": "JWT audience for Auth tokens.", "secret": false, "strategy": "default", "default": "authenticated" }, { "key": "GOTRUE_JWT_EXP", "service": "Auth", "description": "Lifetime in seconds for Auth JWTs.", "secret": false, "strategy": "default", "default": "3600" }, { "key": "GOTRUE_API_HOST", "service": "Auth", "description": "Host the Auth API listens on.", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "GOTRUE_API_PORT", "service": "Auth", "description": "Port the Auth API listens on.", "secret": false, "strategy": "default", "default": "9999" }, { "key": "GOTRUE_SITE_URL", "service": "Auth", "description": "Public site URL for Auth.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "API_EXTERNAL_URL", "service": "Auth", "description": "Public external URL for the Auth API.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "GOTRUE_DB_DRIVER", "service": "Auth", "description": "Database driver used by Auth.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "GOTRUE_DB_SCHEMA", "service": "Auth", "description": "Database schema used by Auth.", "secret": false, "strategy": "default", "default": "auth" }, { "key": "GOTRUE_SMTP_HOST", "service": "Auth", "description": "SMTP host for Auth emails, to be filled by the user.", "secret": false, "strategy": "ask_user" }, { "key": "GOTRUE_SMTP_PORT", "service": "Auth", "description": "SMTP port for Auth emails, to be filled by the user.", "secret": false, "strategy": "ask_user" }, { "key": "GOTRUE_JWT_SECRET", "service": "Auth", "description": "JWT secret shared from Gateway.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GOTRUE_DB_PASSWORD", "service": "Auth", "description": "Password Auth uses to connect to Postgres, from Postgres.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "GOTRUE_DB_POOLER_HOST", "service": "Auth", "description": "Private domain of the Supavisor pooler.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "GOTRUE_DB_POOLER_PORT", "service": "Auth", "description": "Pooler port Auth uses, 6543.", "secret": false, "strategy": "default", "default": "6543" }, { "key": "GOTRUE_MAILER_OTP_EXP", "service": "Auth", "description": "Lifetime in seconds for Auth one-time codes.", "secret": false, "strategy": "default", "default": "3600" }, { "key": "GOTRUE_URI_ALLOW_LIST", "service": "Auth", "description": "Allowed redirect URIs for Auth, to be filled by the user.", "secret": false, "strategy": "ask_user" }, { "key": "GOTRUE_DB_DATABASE_NAME", "service": "Auth", "description": "Database name Auth connects to.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "GOTRUE_MAILER_AUTOCONFIRM", "service": "Auth", "description": "Whether Auth auto-confirms emailed accounts.", "secret": false, "strategy": "default", "default": "true" }, { "key": "GOTRUE_DB_POOLER_TENANT_ID", "service": "Auth", "description": "Tenant ID for the Auth pooler.", "secret": false, "strategy": "default", "default": "supabase" }, { "key": "GOTRUE_EXTERNAL_EMAIL_ENABLED", "service": "Auth", "description": "Whether external email sign-in is enabled.", "secret": false, "strategy": "default", "default": "true" }, { "key": "GOTRUE_EXTERNAL_PHONE_ENABLED", "service": "Auth", "description": "Whether phone sign-in is enabled.", "secret": false, "strategy": "default", "default": "false" }, { "key": "GOTRUE_JWT_DEFAULT_GROUP_NAME", "service": "Auth", "description": "Default group name for Auth JWTs.", "secret": false, "strategy": "default", "default": "authenticated" }, { "key": "GOTRUE_EXTERNAL_GOOGLE_ENABLED", "service": "Auth", "description": "Whether Google sign-in is enabled.", "secret": false, "strategy": "default", "default": "false" }, { "key": "GOTRUE_MAILER_SUBJECTS_RECOVERY", "service": "Auth", "description": "Subject line for password recovery emails.", "secret": false, "strategy": "default", "default": "Reset your password" }, { "key": "GOTRUE_DB_POOLER_MAX_CLIENT_CONN", "service": "Auth", "description": "Maximum client connections for the Auth pooler.", "secret": false, "strategy": "default", "default": "100" }, { "key": "GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI", "service": "Auth", "description": "Redirect URI for Google sign-in, to be filled by the user.", "secret": false, "strategy": "ask_user" }, { "key": "GOTRUE_MAILER_SUBJECTS_CONFIRMATION", "service": "Auth", "description": "Subject line for confirmation emails.", "secret": false, "strategy": "default", "default": "Confirm your email" }, { "key": "HOSTNAME", "service": "Studio", "description": "Host Studio listens on.", "secret": false, "strategy": "default", "default": "0.0.0.0" }, { "key": "POSTGRES_DB", "service": "Studio", "description": "Database name Studio connects to.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SUPABASE_URL", "service": "Studio", "description": "Internal URL of the Supabase Gateway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_HOST", "service": "Studio", "description": "Private domain of the Postgres service.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "POSTGRES_PORT", "service": "Studio", "description": "Port Studio uses to connect to Postgres.", "secret": false, "strategy": "default", "default": "5432" }, { "key": "OPENAI_API_KEY", "service": "Studio", "description": "OpenAI API key for Studio, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "AUTH_JWT_SECRET", "service": "Studio", "description": "JWT secret shared from Gateway, used to verify tokens.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PGRST_DB_SCHEMAS", "service": "Studio", "description": "Database schemas exposed in Studio.", "secret": false, "strategy": "default", "default": "public,graphql_public" }, { "key": "PGRST_DB_MAX_ROWS", "service": "Studio", "description": "Maximum rows returned by a single Studio query.", "secret": false, "strategy": "default", "default": "1000" }, { "key": "POSTGRES_PASSWORD", "service": "Studio", "description": "Password Studio uses to connect to Postgres, from Postgres.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "PG_META_CRYPTO_KEY", "service": "Studio", "description": "Encryption key shared from Meta.", "secret": true, "strategy": "railway_provided", "railway_source": "reference_variable" }, { "key": "STUDIO_PG_META_URL", "service": "Studio", "description": "Internal URL of the Meta service for Studio.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_private_domain" }, { "key": "SUPABASE_PUBLIC_URL", "service": "Studio", "description": "Public URL of the Supabase Gateway.", "secret": false, "strategy": "railway_provided", "railway_source": "railway_domain" }, { "key": "SUPABASE_SECRET_KEY", "service": "Studio", "description": "Secret key, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DEFAULT_PROJECT_NAME", "service": "Studio", "description": "Default project name shown in Studio.", "secret": false, "strategy": "default", "default": "Default Project" }, { "key": "RAILWAY_DOCKERFILE_PATH", "service": "Studio", "description": "Path to the Studio Dockerfile in the repository.", "secret": false, "strategy": "default", "default": "railway/services/studio/Dockerfile" }, { "key": "POSTGRES_USER_READ_WRITE", "service": "Studio", "description": "Read-write database user for Studio.", "secret": false, "strategy": "default", "default": "postgres" }, { "key": "SUPABASE_PUBLISHABLE_KEY", "service": "Studio", "description": "Publishable key, to be filled by the user.", "secret": true, "strategy": "generate", "generate": "random_base64_32" }, { "key": "DEFAULT_ORGANIZATION_NAME", "service": "Studio", "description": "Default organization name shown in Studio.", "secret": false, "strategy": "default", "default": "Default Organization" }, { "key": "ENABLED_FEATURES_LOGS_ALL", "service": "Studio", "description": "Whether Studio enables all log features.", "secret": false, "strategy": "default", "default": "false" }, { "key": "PGRST_DB_EXTRA_SEARCH_PATH", "service": "Studio", "description": "Extra Postgres search path for Studio.", "secret": false, "strategy": "default", "default": "public" }, { "key": "SNIPPETS_MANAGEMENT_FOLDER", "service": "Studio", "description": "Folder Studio uses to manage snippets.", "secret": false, "strategy": "default", "default": "/app/snippets" }, { "key": "EDGE_FUNCTIONS_MANAGEMENT_FOLDER", "service": "Studio", "description": "Folder Studio uses to manage edge functions.", "secret": false, "strategy": "default", "default": "/app/edge-functions" } ], "deploy": { "mcp": { "server": "railway", "tool": "deploy_template", "args": { "template_code": "supabase-self-hosted" } }, "cli": "railway deploy --template supabase-self-hosted", "api": { "method": "POST", "path": "/graphql/v2", "body": { "query": "mutation templateDeploy($input: TemplateDeployV2Input!) { templateDeployV2(input: $input) { projectId workflowId } }", "variables": { "input": { "templateId": "a309c92e-d4cc-4e63-be05-12486de81bc1", "serializedConfig": { "buckets": { "fe72dad4-77d2-4e91-b52e-bef3d5efbfc5": { "name": "StorageBucket" } }, "services": { "2169b581-f87c-4435-84f0-58d250c777d6": { "name": "Postgres", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "PGPORT": { "description": "Port Postgres listens on inside its private network.", "defaultValue": "5432" }, "JWT_EXP": { "description": "Lifetime in seconds for Postgres-related JWT tokens.", "defaultValue": "3600" }, "PGDATABASE": { "description": "Default database name used by Postgres clients.", "defaultValue": "postgres" }, "POSTGRES_DB": { "description": "Initial database created by Postgres on first start.", "defaultValue": "postgres" }, "POSTGRES_HOST": { "description": "Socket directory Postgres listens on inside the container.", "defaultValue": "/var/run/postgresql" }, "POSTGRES_PORT": { "description": "Port Postgres listens on inside its private network.", "defaultValue": "5432" }, "PGSODIUM_ROOT_KEY": { "description": "Root key for Postgres column encryption, generated at deploy time.", "defaultValue": "${{secret}}" }, "POSTGRES_PASSWORD": { "description": "Password for the Postgres database, generated at deploy time.", "defaultValue": "${{secret}}" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Postgres Dockerfile in the repository.", "defaultValue": "railway/services/db/Dockerfile" } }, "volumeMounts": { "2169b581-f87c-4435-84f0-58d250c777d6": { "mountPath": "/var/lib/postgresql/data" } } }, "255081ef-4ccf-4ed4-a9a7-1a0f4d380ba3": { "name": "Realtime", "source": { "image": "supabase/realtime:v2.143.3" }, "variables": { "PORT": { "description": "Port Realtime listens on.", "defaultValue": "4000" }, "DB_HOST": { "description": "Private domain of the Postgres service.", "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "DB_NAME": { "description": "Database name Realtime connects to.", "defaultValue": "postgres" }, "DB_PORT": { "description": "Port Realtime uses to connect to Postgres.", "defaultValue": "5432" }, "DB_USER": { "description": "Database user Realtime connects as.", "defaultValue": "supabase_admin" }, "APP_NAME": { "description": "Application name for Realtime.", "defaultValue": "realtime" }, "DNS_NODES": { "description": "List of DNS nodes for Realtime clustering, left empty.", "defaultValue": "{{DNS_NODES}}" }, "DB_ENC_KEY": { "description": "Encryption key for Realtime database, from Realtime.", "defaultValue": "${{Realtime.REALTIME_DB_ENC_KEY}}" }, "ERL_AFLAGS": { "description": "Erlang runtime flags for Realtime.", "defaultValue": "-proto_dist inet_tcp" }, "DB_PASSWORD": { "description": "Password Realtime uses to connect to Postgres, from Postgres.", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "RUN_JANITOR": { "description": "Whether Realtime runs the janitor process.", "defaultValue": "true" }, "RLIMIT_NOFILE": { "description": "Maximum open files limit for Realtime.", "defaultValue": "10000" }, "API_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify API tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "SEED_SELF_HOST": { "description": "Whether Realtime seeds self-host configuration.", "defaultValue": "true" }, "SECRET_KEY_BASE": { "description": "Secret key base for Realtime, generated at deploy time.", "defaultValue": "{{SECRET_KEY_BASE}}" }, "METRICS_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify metrics.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "REALTIME_DB_ENC_KEY": { "description": "Encryption key for Realtime database, 16 hex characters, generated at deploy time.", "defaultValue": "{{REALTIME_DB_ENC_KEY}}" }, "DB_AFTER_CONNECT_QUERY": { "description": "Query run after Realtime connects to the database.", "defaultValue": "SET search_path TO _realtime" }, "DISABLE_HEALTHCHECK_LOGGING": { "description": "Whether Realtime disables healthcheck logging.", "defaultValue": "true" } } }, "2b42fabb-1f64-4da8-831f-cb3c21fc2cb9": { "name": "Gateway", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "PORT": { "description": "Port the Gateway listens on for public traffic.", "defaultValue": "8000" }, "AUTH_HOST": { "description": "Private domain of the Auth service.", "defaultValue": "${{Auth.RAILWAY_PRIVATE_DOMAIN}}" }, "META_HOST": { "description": "Private domain of the Meta service.", "defaultValue": "${{Meta.RAILWAY_PRIVATE_DOMAIN}}" }, "REST_HOST": { "description": "Private domain of the REST service.", "defaultValue": "${{REST.RAILWAY_PRIVATE_DOMAIN}}" }, "JWT_SECRET": { "isOptional": false, "description": "JWT secret generated at deploy time, shared across services.", "defaultValue": "${{secret}}" }, "STUDIO_HOST": { "description": "Private domain of the Studio service.", "defaultValue": "${{Studio.RAILWAY_PRIVATE_DOMAIN}}" }, "STORAGE_HOST": { "description": "Private domain of the Storage service.", "defaultValue": "${{Storage.RAILWAY_PRIVATE_DOMAIN}}" }, "REALTIME_HOST": { "description": "Private domain of the Realtime service.", "defaultValue": "${{Realtime.RAILWAY_PRIVATE_DOMAIN}}" }, "FUNCTIONS_HOST": { "description": "Private domain of the Functions service.", "defaultValue": "${{Functions.RAILWAY_PRIVATE_DOMAIN}}" }, "DASHBOARD_PASSWORD": { "isOptional": false, "description": "Password for the Gateway dashboard, generated at deploy time.", "defaultValue": "${{secret}}" }, "DASHBOARD_USERNAME": { "description": "Username for the Gateway dashboard.", "defaultValue": "supabase" }, "ANON_KEY_ASYMMETRIC": { "description": "Anonymous key in asymmetric format, to be filled by the user.", "defaultValue": "{{ANON_KEY_ASYMMETRIC}}" }, "SUPABASE_PUBLIC_URL": { "description": "Public URL of the Supabase Gateway.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "SUPABASE_SECRET_KEY": { "description": "Secret key, to be filled by the user.", "defaultValue": "{{SUPABASE_SECRET_KEY}}" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Gateway Dockerfile in the repository.", "defaultValue": "railway/services/gateway/Dockerfile" }, "SUPABASE_PUBLISHABLE_KEY": { "description": "Publishable key, to be filled by the user.", "defaultValue": "{{SUPABASE_PUBLISHABLE_KEY}}" }, "SERVICE_ROLE_KEY_ASYMMETRIC": { "description": "Service role key in asymmetric format, to be filled by the user.", "defaultValue": "{{SERVICE_ROLE_KEY_ASYMMETRIC}}" } }, "networking": { "serviceDomains": { ":8000": { "port": 8000 } } } }, "38e5fc92-03f7-4637-a1ab-aa4a05cfaa01": { "name": "REST", "deploy": { "startCommand": "postgrest" }, "source": { "image": "postgrest/postgrest:v14.18" }, "variables": { "PGRST_DB_URI": { "description": "Postgres connection string for the REST API.", "defaultValue": "postgres://authenticator:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "PGRST_DB_SCHEMAS": { "description": "Database schemas exposed by the REST API.", "defaultValue": "public,graphql_public" }, "PGRST_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "PGRST_DB_MAX_ROWS": { "description": "Maximum rows returned by a single REST query.", "defaultValue": "1000" }, "PGRST_DB_ANON_ROLE": { "description": "Postgres role used for anonymous REST requests.", "defaultValue": "anon" }, "PGRST_ADMIN_SERVER_HOST": { "description": "Host the REST admin server listens on.", "defaultValue": "localhost" }, "PGRST_ADMIN_SERVER_PORT": { "description": "Port the REST admin server listens on.", "defaultValue": "3001" }, "PGRST_DB_USE_LEGACY_GUCS": { "description": "Whether to use legacy Postgres configuration settings.", "defaultValue": "false" }, "PGRST_APP_SETTINGS_JWT_EXP": { "description": "Lifetime in seconds for REST JWT settings.", "defaultValue": "3600" }, "PGRST_DB_EXTRA_SEARCH_PATH": { "description": "Extra Postgres search path for REST queries.", "defaultValue": "public" } } }, "4eaefda7-1cc3-404c-9ed2-1bc527102ba9": { "name": "Functions", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "VERIFY_JWT": { "description": "Whether Functions verifies JWTs on incoming requests.", "defaultValue": "false" }, "SUPABASE_URL": { "description": "Internal URL of the Supabase Gateway.", "defaultValue": "http://${{Gateway.RAILWAY_PRIVATE_DOMAIN}}:8000" }, "SUPABASE_DB_URL": { "description": "Postgres connection string for Functions.", "defaultValue": "postgresql://postgres:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "SUPABASE_PUBLIC_URL": { "description": "Public URL of the Supabase Gateway.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "SUPABASE_SECRET_KEYS": { "description": "Secret keys map for Functions, with a default empty key.", "defaultValue": "{\"default\":\"\"}" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Functions Dockerfile in the repository.", "defaultValue": "railway/services/functions/Dockerfile" }, "SUPABASE_PUBLISHABLE_KEYS": { "description": "Publishable keys map for Functions, with a default empty key.", "defaultValue": "{\"default\":\"\"}" } } }, "61c50506-9e53-4fd7-bc79-c22419f45a03": { "name": "Storage", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "REGION": { "description": "Region of the Storage Bucket, from StorageBucket.", "defaultValue": "${{StorageBucket.REGION}}" }, "TENANT_ID": { "description": "Tenant ID for Storage.", "defaultValue": "stub" }, "DATABASE_URL": { "description": "Postgres connection string for Storage.", "defaultValue": "postgres://postgres:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "IMGPROXY_URL": { "description": "Internal URL of Imgproxy for image transformation.", "defaultValue": "http://${{Imgproxy.RAILWAY_PRIVATE_DOMAIN}}:5001" }, "POSTGREST_URL": { "description": "Internal URL of the REST service.", "defaultValue": "http://${{REST.RAILWAY_PRIVATE_DOMAIN}}:3000" }, "AUTH_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "FILE_SIZE_LIMIT": { "description": "Maximum file size in bytes for Storage uploads.", "defaultValue": "52428800" }, "STORAGE_BACKEND": { "description": "Backend used by Storage.", "defaultValue": "s3" }, "GLOBAL_S3_BUCKET": { "description": "Bucket name from StorageBucket.", "defaultValue": "${{StorageBucket.BUCKET}}" }, "AWS_ACCESS_KEY_ID": { "description": "Access key ID from StorageBucket.", "defaultValue": "${{StorageBucket.ACCESS_KEY_ID}}" }, "GLOBAL_S3_ENDPOINT": { "description": "S3 endpoint from StorageBucket.", "defaultValue": "${{StorageBucket.ENDPOINT}}" }, "GLOBAL_S3_PROTOCOL": { "description": "Protocol for S3 connections.", "defaultValue": "https" }, "STORAGE_PUBLIC_URL": { "description": "Public URL of the Supabase Gateway for Storage.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "AWS_SECRET_ACCESS_KEY": { "description": "Secret access key from StorageBucket.", "defaultValue": "${{StorageBucket.SECRET_ACCESS_KEY}}" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Storage Dockerfile in the repository.", "defaultValue": "railway/services/storage/Dockerfile" }, "FILE_STORAGE_BACKEND_PATH": { "description": "Path where Storage files are stored.", "defaultValue": "/var/lib/storage" }, "S3_PROTOCOL_ACCESS_KEY_ID": { "description": "Access key ID for S3 protocol, generated at deploy time.", "defaultValue": "${{secret}}" }, "GLOBAL_S3_FORCE_PATH_STYLE": { "description": "Whether Storage forces path-style S3 URLs.", "defaultValue": "false" }, "ENABLE_IMAGE_TRANSFORMATION": { "description": "Whether Storage enables image transformation.", "defaultValue": "true" }, "S3_PROTOCOL_ACCESS_KEY_SECRET": { "description": "Secret access key for S3 protocol, generated at deploy time.", "defaultValue": "${{secret}}" }, "REQUEST_ALLOW_X_FORWARDED_PATH": { "description": "Whether Storage allows X-Forwarded-Path headers.", "defaultValue": "true" } } }, "a5565f56-1e86-4672-8add-00c53415723b": { "name": "Imgproxy", "source": { "image": "darthsim/imgproxy:v3.31.4" }, "variables": { "IMGPROXY_BIND": { "description": "Address and port Imgproxy listens on for image requests.", "defaultValue": ":5001" }, "IMGPROXY_USE_ETAG": { "description": "Whether Imgproxy sends ETag headers for cached images.", "defaultValue": "true" }, "IMGPROXY_AUTO_WEBP": { "description": "Whether Imgproxy automatically serves WebP images when supported.", "defaultValue": "true" }, "IMGPROXY_MAX_SRC_RESOLUTION": { "description": "Maximum resolution in megapixels for source images.", "defaultValue": "16.8" }, "IMGPROXY_LOCAL_FILESYSTEM_ROOT": { "description": "Root directory Imgproxy uses for local files.", "defaultValue": "/" } } }, "a8f8bd81-42a0-46f8-bfb8-94c3465233a7": { "name": "Meta", "source": { "image": "supabase/postgres-meta:v0.100.0" }, "variables": { "PG_META_PORT": { "description": "Port the Postgres Meta API listens on.", "defaultValue": "8080" }, "PG_META_DB_HOST": { "description": "Private domain of the Postgres service.", "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "PG_META_DB_NAME": { "description": "Database name Meta connects to.", "defaultValue": "postgres" }, "PG_META_DB_PORT": { "description": "Port Meta uses to connect to Postgres.", "defaultValue": "5432" }, "PG_META_DB_USER": { "description": "Database user Meta connects as.", "defaultValue": "postgres" }, "PG_META_CRYPTO_KEY": { "description": "Encryption key for Postgres Meta, generated at deploy time.", "defaultValue": "{{PG_META_CRYPTO_KEY}}" }, "PG_META_DB_PASSWORD": { "description": "Password Meta uses to connect to Postgres, from Postgres.", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" } } }, "bb45b7d3-61e5-4e3b-a8f7-01e0260686b7": { "name": "Supavisor", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "PORT": { "description": "Port Supavisor listens on.", "defaultValue": "4000" }, "REGION": { "description": "Region label for Supavisor.", "defaultValue": "local" }, "ERL_AFLAGS": { "description": "Erlang runtime flags for Supavisor.", "defaultValue": "-proto_dist inet_tcp" }, "POSTGRES_DB": { "description": "Database name Supavisor connects to.", "defaultValue": "postgres" }, "DATABASE_URL": { "description": "Postgres connection string for Supavisor.", "defaultValue": "postgres://postgres:${{Postgres.POSTGRES_PASSWORD}}@${{Postgres.RAILWAY_PRIVATE_DOMAIN}}:5432/postgres" }, "DB_POOL_SIZE": { "description": "Database pool size for Supavisor.", "defaultValue": "5" }, "POSTGRES_HOST": { "description": "Private domain of the Postgres service.", "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "description": "Port Supavisor uses to connect to Postgres.", "defaultValue": "5432" }, "VAULT_ENC_KEY": { "description": "Encryption key for Supavisor vault, 64 characters, generated at deploy time.", "defaultValue": "{{VAULT_ENC_KEY}}" }, "API_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify API tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "SECRET_KEY_BASE": { "description": "Secret key base shared from Realtime.", "defaultValue": "${{Realtime.SECRET_KEY_BASE}}" }, "CLUSTER_POSTGRES": { "description": "Whether Supavisor clusters Postgres.", "defaultValue": "true" }, "POOLER_POOL_MODE": { "description": "Pool mode for the Supavisor pooler.", "defaultValue": "transaction" }, "POOLER_TENANT_ID": { "description": "Tenant ID for the Supavisor pooler.", "defaultValue": "supabase" }, "POSTGRES_PASSWORD": { "description": "Password Supavisor uses to connect to Postgres, from Postgres.", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "METRICS_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify metrics.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "POOLER_MAX_CLIENT_CONN": { "description": "Maximum client connections for the Supavisor pooler.", "defaultValue": "100" }, "POOLER_URL_TRANSACTION": { "description": "Transaction pooler connection string for Supavisor.", "defaultValue": "postgres://postgres.supabase:${{Postgres.POSTGRES_PASSWORD}}@${{Supavisor.RAILWAY_PRIVATE_DOMAIN}}:6543/postgres" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Supavisor Dockerfile in the repository.", "defaultValue": "railway/services/supavisor/Dockerfile" }, "POOLER_DEFAULT_POOL_SIZE": { "description": "Default pool size for the Supavisor pooler.", "defaultValue": "20" } } }, "c55e8495-f25b-4fa1-8011-505aed7c8c15": { "name": "Auth", "source": { "image": "supabase/gotrue:v2.197.0" }, "variables": { "GOTRUE_DB_HOST": { "description": "Private domain of the Postgres service.", "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "GOTRUE_DB_PORT": { "description": "Port Auth uses to connect to Postgres.", "defaultValue": "5432" }, "GOTRUE_DB_USER": { "description": "Database user Auth connects as.", "defaultValue": "supabase_auth_admin" }, "GOTRUE_JWT_AUD": { "description": "JWT audience for Auth tokens.", "defaultValue": "authenticated" }, "GOTRUE_JWT_EXP": { "description": "Lifetime in seconds for Auth JWTs.", "defaultValue": "3600" }, "GOTRUE_API_HOST": { "description": "Host the Auth API listens on.", "defaultValue": "0.0.0.0" }, "GOTRUE_API_PORT": { "description": "Port the Auth API listens on.", "defaultValue": "9999" }, "GOTRUE_SITE_URL": { "description": "Public site URL for Auth.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "API_EXTERNAL_URL": { "description": "Public external URL for the Auth API.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}/auth/v1" }, "GOTRUE_DB_DRIVER": { "description": "Database driver used by Auth.", "defaultValue": "postgres" }, "GOTRUE_DB_SCHEMA": { "description": "Database schema used by Auth.", "defaultValue": "auth" }, "GOTRUE_SMTP_HOST": { "description": "SMTP host for Auth emails, to be filled by the user.", "defaultValue": "{{GOTRUE_SMTP_HOST}}" }, "GOTRUE_SMTP_PORT": { "description": "SMTP port for Auth emails, to be filled by the user.", "defaultValue": "{{GOTRUE_SMTP_PORT}}" }, "GOTRUE_JWT_SECRET": { "description": "JWT secret shared from Gateway.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "GOTRUE_DB_PASSWORD": { "description": "Password Auth uses to connect to Postgres, from Postgres.", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "GOTRUE_DB_POOLER_HOST": { "description": "Private domain of the Supavisor pooler.", "defaultValue": "${{Supavisor.RAILWAY_PRIVATE_DOMAIN}}" }, "GOTRUE_DB_POOLER_PORT": { "description": "Pooler port Auth uses, 6543.", "defaultValue": "6543" }, "GOTRUE_MAILER_OTP_EXP": { "description": "Lifetime in seconds for Auth one-time codes.", "defaultValue": "3600" }, "GOTRUE_URI_ALLOW_LIST": { "description": "Allowed redirect URIs for Auth, to be filled by the user.", "defaultValue": "{{GOTRUE_URI_ALLOW_LIST}}" }, "GOTRUE_DB_DATABASE_NAME": { "description": "Database name Auth connects to.", "defaultValue": "postgres" }, "GOTRUE_MAILER_AUTOCONFIRM": { "description": "Whether Auth auto-confirms emailed accounts.", "defaultValue": "true" }, "GOTRUE_DB_POOLER_TENANT_ID": { "description": "Tenant ID for the Auth pooler.", "defaultValue": "supabase" }, "GOTRUE_EXTERNAL_EMAIL_ENABLED": { "description": "Whether external email sign-in is enabled.", "defaultValue": "true" }, "GOTRUE_EXTERNAL_PHONE_ENABLED": { "description": "Whether phone sign-in is enabled.", "defaultValue": "false" }, "GOTRUE_JWT_DEFAULT_GROUP_NAME": { "description": "Default group name for Auth JWTs.", "defaultValue": "authenticated" }, "GOTRUE_EXTERNAL_GOOGLE_ENABLED": { "description": "Whether Google sign-in is enabled.", "defaultValue": "false" }, "GOTRUE_MAILER_SUBJECTS_RECOVERY": { "description": "Subject line for password recovery emails.", "defaultValue": "Reset your password" }, "GOTRUE_DB_POOLER_MAX_CLIENT_CONN": { "description": "Maximum client connections for the Auth pooler.", "defaultValue": "100" }, "GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI": { "description": "Redirect URI for Google sign-in, to be filled by the user.", "defaultValue": "{{GOTRUE_EXTERNAL_GOOGLE_REDIRECT_URI}}" }, "GOTRUE_MAILER_SUBJECTS_CONFIRMATION": { "description": "Subject line for confirmation emails.", "defaultValue": "Confirm your email" } } }, "f3f7b446-13a6-4827-95fb-8af48b2b2267": { "name": "Studio", "source": { "repo": "AdeelAhmedKhan/supabase-selfhost-railway" }, "variables": { "HOSTNAME": { "description": "Host Studio listens on.", "defaultValue": "0.0.0.0" }, "POSTGRES_DB": { "description": "Database name Studio connects to.", "defaultValue": "postgres" }, "SUPABASE_URL": { "description": "Internal URL of the Supabase Gateway.", "defaultValue": "http://${{Gateway.RAILWAY_PRIVATE_DOMAIN}}:8000" }, "POSTGRES_HOST": { "description": "Private domain of the Postgres service.", "defaultValue": "${{Postgres.RAILWAY_PRIVATE_DOMAIN}}" }, "POSTGRES_PORT": { "description": "Port Studio uses to connect to Postgres.", "defaultValue": "5432" }, "OPENAI_API_KEY": { "description": "OpenAI API key for Studio, to be filled by the user.", "defaultValue": "{{OPENAI_API_KEY}}" }, "AUTH_JWT_SECRET": { "description": "JWT secret shared from Gateway, used to verify tokens.", "defaultValue": "${{Gateway.JWT_SECRET}}" }, "PGRST_DB_SCHEMAS": { "description": "Database schemas exposed in Studio.", "defaultValue": "public,graphql_public" }, "PGRST_DB_MAX_ROWS": { "description": "Maximum rows returned by a single Studio query.", "defaultValue": "1000" }, "POSTGRES_PASSWORD": { "description": "Password Studio uses to connect to Postgres, from Postgres.", "defaultValue": "${{Postgres.POSTGRES_PASSWORD}}" }, "PG_META_CRYPTO_KEY": { "description": "Encryption key shared from Meta.", "defaultValue": "${{Meta.PG_META_CRYPTO_KEY}}" }, "STUDIO_PG_META_URL": { "description": "Internal URL of the Meta service for Studio.", "defaultValue": "http://${{Meta.RAILWAY_PRIVATE_DOMAIN}}:8080" }, "SUPABASE_PUBLIC_URL": { "description": "Public URL of the Supabase Gateway.", "defaultValue": "https://${{Gateway.RAILWAY_PUBLIC_DOMAIN}}" }, "SUPABASE_SECRET_KEY": { "description": "Secret key, to be filled by the user.", "defaultValue": "{{SUPABASE_SECRET_KEY}}" }, "DEFAULT_PROJECT_NAME": { "description": "Default project name shown in Studio.", "defaultValue": "Default Project" }, "RAILWAY_DOCKERFILE_PATH": { "description": "Path to the Studio Dockerfile in the repository.", "defaultValue": "railway/services/studio/Dockerfile" }, "POSTGRES_USER_READ_WRITE": { "description": "Read-write database user for Studio.", "defaultValue": "postgres" }, "SUPABASE_PUBLISHABLE_KEY": { "description": "Publishable key, to be filled by the user.", "defaultValue": "{{SUPABASE_PUBLISHABLE_KEY}}" }, "DEFAULT_ORGANIZATION_NAME": { "description": "Default organization name shown in Studio.", "defaultValue": "Default Organization" }, "ENABLED_FEATURES_LOGS_ALL": { "description": "Whether Studio enables all log features.", "defaultValue": "false" }, "PGRST_DB_EXTRA_SEARCH_PATH": { "description": "Extra Postgres search path for Studio.", "defaultValue": "public" }, "SNIPPETS_MANAGEMENT_FOLDER": { "description": "Folder Studio uses to manage snippets.", "defaultValue": "/app/snippets" }, "EDGE_FUNCTIONS_MANAGEMENT_FOLDER": { "description": "Folder Studio uses to manage edge functions.", "defaultValue": "/app/edge-functions" } }, "volumeMounts": { "f3f7b446-13a6-4827-95fb-8af48b2b2267": { "mountPath": "/app/snippets" } } } } } } } } } }, "post_deploy": {}, "resources": { "expected_services": 11, "needs_volume": true }, "generated_at": "2026-11-03T22:15:11.821Z", "generator_version": "0.1.0" }