287 lines
9.8 KiB
TOML
287 lines
9.8 KiB
TOML
# For detailed configuration reference documentation, visit:
|
|
# https://supabase.com/docs/guides/local-development/cli/config
|
|
# A string used to distinguish different Supabase projects on the same host. Defaults to the
|
|
# working directory name when running `supabase init`.
|
|
project_id = "test"
|
|
|
|
[api]
|
|
enabled = true
|
|
# Port to use for the API URL.
|
|
port = 54321
|
|
# Schemas to expose in your API. Tables, views and stored procedures in this schema will get API
|
|
# endpoints. `public` and `graphql_public` schemas are included by default.
|
|
schemas = ["public", "graphql_public"]
|
|
# Extra schemas to add to the search_path of every request. public is always included.
|
|
extra_search_path = ["public", "extensions"]
|
|
# The maximum number of rows returns from a view, table, or stored procedure. Limits payload size
|
|
# for accidental or malicious requests.
|
|
max_rows = 1000
|
|
|
|
[api.tls]
|
|
# Enable HTTPS endpoints locally using a self-signed certificate.
|
|
enabled = true
|
|
|
|
[db]
|
|
# Port to use for the local database URL.
|
|
port = 54322
|
|
# Port used by db diff command to initialize the shadow database.
|
|
shadow_port = 54320
|
|
# The database major version to use. This has to be the same as your remote database's. Run `SHOW
|
|
# server_version;` on the remote database to check.
|
|
major_version = 15
|
|
|
|
[db.migrations]
|
|
# Specifies an ordered list of schema files that describe your database.
|
|
# Supports glob patterns relative to supabase directory: "./schemas/*.sql"
|
|
schema_paths = ["./schemas/*.sql"]
|
|
|
|
[db.pooler]
|
|
enabled = true
|
|
# Port to use for the local connection pooler.
|
|
port = 54329
|
|
# Specifies when a server connection can be reused by other clients.
|
|
# Configure one of the supported pooler modes: `transaction`, `session`.
|
|
pool_mode = "transaction"
|
|
# How many server connections to allow per user/database pair.
|
|
default_pool_size = 20
|
|
# Maximum number of client connections allowed.
|
|
max_client_conn = 100
|
|
|
|
[db.vault]
|
|
test_key = "test_value"
|
|
|
|
[db.seed]
|
|
# If enabled, seeds the database after migrations during a db reset.
|
|
enabled = true
|
|
# Specifies an ordered list of seed files to load during db reset.
|
|
# Supports glob patterns relative to supabase directory: "./seeds/*.sql"
|
|
sql_paths = ["./seed.sql"]
|
|
|
|
[realtime]
|
|
enabled = true
|
|
# Bind realtime via either IPv4 or IPv6. (default: IPv6)
|
|
ip_version = "IPv4"
|
|
# The maximum length in bytes of HTTP request headers. (default: 4096)
|
|
max_header_length = 8192
|
|
|
|
[studio]
|
|
enabled = true
|
|
# Port to use for Supabase Studio.
|
|
port = 54323
|
|
# External URL of the API server that frontend connects to.
|
|
api_url = "http://127.0.0.1"
|
|
# OpenAI API Key to use for Supabase AI in the Supabase Studio.
|
|
openai_api_key = "env(OPENAI_API_KEY)"
|
|
|
|
# Email testing server. Emails sent with the local dev setup are not actually sent - rather, they
|
|
# are monitored, and you can view the emails that would have been sent from the web interface.
|
|
[inbucket]
|
|
enabled = true
|
|
# Port to use for the email testing server web interface.
|
|
port = 54324
|
|
# Uncomment to expose additional ports for testing user applications that send emails.
|
|
# smtp_port = 54325
|
|
# pop3_port = 54326
|
|
# admin_email = "admin@email.com"
|
|
# sender_name = "Admin"
|
|
|
|
[storage]
|
|
enabled = true
|
|
# The maximum file size allowed (e.g. "5MB", "500KB").
|
|
file_size_limit = "50MiB"
|
|
|
|
# Image transformation API is available to Supabase Pro plan.
|
|
[storage.image_transformation]
|
|
enabled = true
|
|
|
|
# Uncomment to configure local storage buckets
|
|
[storage.buckets.images]
|
|
public = false
|
|
file_size_limit = "50MiB"
|
|
allowed_mime_types = ["image/png", "image/jpeg"]
|
|
objects_path = "./images"
|
|
|
|
[auth]
|
|
enabled = true
|
|
# The base URL of your website. Used as an allow-list for redirects and for constructing URLs used
|
|
# in emails.
|
|
site_url = "http://127.0.0.1:3000"
|
|
# A list of *exact* URLs that auth providers are permitted to redirect to post authentication.
|
|
additional_redirect_urls = ["https://127.0.0.1:3000", "env(AUTH_CALLBACK_URL)"]
|
|
# How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week).
|
|
jwt_expiry = 3600
|
|
# If disabled, the refresh token will never expire.
|
|
enable_refresh_token_rotation = true
|
|
# Allows refresh tokens to be reused after expiry, up to the specified interval in seconds.
|
|
# Requires enable_refresh_token_rotation = true.
|
|
refresh_token_reuse_interval = 10
|
|
# Allow/disallow new user signups to your project.
|
|
enable_signup = true
|
|
# Allow/disallow anonymous sign-ins to your project.
|
|
enable_anonymous_sign_ins = true
|
|
# Allow/disallow testing manual linking of accounts
|
|
enable_manual_linking = true
|
|
# Passwords shorter than this value will be rejected as weak. Minimum 6, recommended 8 or more.
|
|
minimum_password_length = 6
|
|
# Passwords that do not meet the following requirements will be rejected as weak. Supported values
|
|
# are: `letters_digits`, `lower_upper_letters_digits`, `lower_upper_letters_digits_symbols`
|
|
password_requirements = ""
|
|
|
|
# Configure one of the supported captcha providers: `hcaptcha`, `turnstile`.
|
|
[auth.captcha]
|
|
enabled = true
|
|
provider = "hcaptcha"
|
|
secret = "env(HCAPTCHA_SECRET)"
|
|
|
|
[auth.email]
|
|
# Allow/disallow new user signups via email to your project.
|
|
enable_signup = true
|
|
# If enabled, a user will be required to confirm any email change on both the old, and new email
|
|
# addresses. If disabled, only the new email is required to confirm.
|
|
double_confirm_changes = true
|
|
# If enabled, users need to confirm their email address before signing in.
|
|
enable_confirmations = false
|
|
# If enabled, users will need to reauthenticate or have logged in recently to change their password.
|
|
secure_password_change = true
|
|
# Controls the minimum amount of time that must pass before sending another signup confirmation or password reset email.
|
|
max_frequency = "1s"
|
|
# Number of characters used in the email OTP.
|
|
otp_length = 6
|
|
# Number of seconds before the email OTP expires (defaults to 1 hour).
|
|
otp_expiry = 3600
|
|
|
|
# Use a production-ready SMTP server
|
|
[auth.email.smtp]
|
|
enabled = true
|
|
host = "smtp.sendgrid.net"
|
|
port = 587
|
|
user = "apikey"
|
|
pass = "env(SENDGRID_API_KEY)"
|
|
admin_email = "admin@email.com"
|
|
sender_name = "Admin"
|
|
|
|
# Uncomment to customize email template
|
|
[auth.email.template.invite]
|
|
subject = "You have been invited"
|
|
content_path = "./supabase/templates/invite.html"
|
|
|
|
[auth.sms]
|
|
# Allow/disallow new user signups via SMS to your project.
|
|
enable_signup = true
|
|
# If enabled, users need to confirm their phone number before signing in.
|
|
enable_confirmations = false
|
|
# Template for sending OTP to users
|
|
template = "Your code is {{ `{{ .Code }}` }}"
|
|
# Controls the minimum amount of time that must pass before sending another sms otp.
|
|
max_frequency = "5s"
|
|
|
|
# Use pre-defined map of phone number to OTP for testing.
|
|
[auth.sms.test_otp]
|
|
4152127777 = "123456"
|
|
|
|
# Configure logged in session timeouts.
|
|
[auth.sessions]
|
|
# Force log out after the specified duration.
|
|
timebox = "24h"
|
|
# Force log out if the user has been inactive longer than the specified duration.
|
|
inactivity_timeout = "8h"
|
|
|
|
# This hook runs before a token is issued and allows you to add additional claims based on the authentication method used.
|
|
[auth.hook.custom_access_token]
|
|
enabled = true
|
|
uri = "pg-functions://postgres/auth/custom-access-token-hook"
|
|
|
|
[auth.hook.send_sms]
|
|
enabled = true
|
|
uri = "http://host.docker.internal/functions/v1/send_sms"
|
|
secrets = "env(AUTH_SEND_SMS_SECRETS)"
|
|
|
|
# Configure one of the supported SMS providers: `twilio`, `twilio_verify`, `messagebird`, `textlocal`, `vonage`.
|
|
[auth.sms.twilio]
|
|
enabled = true
|
|
account_sid = "account_sid"
|
|
message_service_sid = "message_service_sid"
|
|
# DO NOT commit your Twilio auth token to git. Use environment variable substitution instead:
|
|
auth_token = "env(TWILIO_AUTH_TOKEN)"
|
|
|
|
# Multi-factor-authentication is available to Supabase Pro plan.
|
|
[auth.mfa]
|
|
max_enrolled_factors = 10
|
|
|
|
# Configure MFA via App Authenticator (TOTP)
|
|
[auth.mfa.totp]
|
|
enroll_enabled = true
|
|
verify_enabled = true
|
|
|
|
# Configure MFA via Phone Messaging
|
|
[auth.mfa.phone]
|
|
enroll_enabled = true
|
|
verify_enabled = true
|
|
otp_length = 6
|
|
template = "Your code is {{ `{{ .Code }}` }}"
|
|
max_frequency = "5s"
|
|
|
|
# Configure MFA via Phone Messaging
|
|
[auth.mfa.web_authn]
|
|
enroll_enabled = true
|
|
verify_enabled = true
|
|
|
|
# Use an external OAuth provider. The full list of providers are: `apple`, `azure`, `bitbucket`,
|
|
# `discord`, `facebook`, `github`, `gitlab`, `google`, `keycloak`, `linkedin_oidc`, `notion`, `twitch`,
|
|
# `twitter`, `slack`, `spotify`, `workos`, `zoom`.
|
|
[auth.external.azure]
|
|
enabled = true
|
|
client_id = "env(AZURE_CLIENT_ID)"
|
|
secret = "env(AZURE_SECRET)"
|
|
# Overrides the default auth provider URL. Used to support self-hosted gitlab, single-tenant Azure,
|
|
# or any other third-party OIDC providers.
|
|
url = "https://login.microsoftonline.com/tenant"
|
|
# If enabled, the nonce check will be skipped. Required for local sign in with Google auth.
|
|
skip_nonce_check = true
|
|
|
|
[edge_runtime]
|
|
enabled = true
|
|
# Configure one of the supported request policies: `oneshot`, `per_worker`.
|
|
# Use `oneshot` for hot reload, or `per_worker` for load testing.
|
|
policy = "per_worker"
|
|
inspector_port = 8083
|
|
|
|
[analytics]
|
|
enabled = true
|
|
port = 54327
|
|
# Configure one of the supported backends: `postgres`, `bigquery`.
|
|
backend = "postgres"
|
|
|
|
# Experimental features may be deprecated any time
|
|
[experimental]
|
|
# Configures Postgres storage engine to use OrioleDB (S3)
|
|
orioledb_version = "15.1.0.150"
|
|
# Configures S3 bucket URL, eg. <bucket_name>.s3-<region>.amazonaws.com
|
|
s3_host = "orioledb.s3-accelerate.amazonaws.com"
|
|
# Configures S3 bucket region, eg. us-east-1
|
|
s3_region = "ap-southeast-1"
|
|
# Configures AWS_ACCESS_KEY_ID for S3 bucket
|
|
s3_access_key = ""
|
|
# Configures AWS_SECRET_ACCESS_KEY for S3 bucket
|
|
s3_secret_key = ""
|
|
|
|
[remotes.production]
|
|
project_id = "vpefcjyosynxeiebfscx"
|
|
|
|
[remotes.production.auth]
|
|
site_url = "http://feature-auth-branch.com/"
|
|
enable_signup = false
|
|
|
|
[remotes.production.auth.external.azure]
|
|
enabled = false
|
|
client_id = "nope"
|
|
|
|
[remotes.staging]
|
|
project_id = "bvikqvbczudanvggcord"
|
|
|
|
[remotes.staging.db.seed]
|
|
enabled = true
|
|
|
|
[remotes.staging.storage.buckets.images]
|
|
allowed_mime_types = ["image/png"]
|