|
| 1 | +# For detailed configuration reference documentation, visit: |
| 2 | +# https://supabase.com/docs/guides/local-development/cli/config |
| 3 | +# A string used to distinguish different Supabase projects on the same host. Defaults to the |
| 4 | +# working directory name when running `supabase init`. |
| 5 | +project_id = "brainsbrainsbrains.com" |
| 6 | + |
| 7 | +[api] |
| 8 | +enabled = true |
| 9 | +# Port to use for the API URL. |
| 10 | +port = 54321 |
| 11 | +# Schemas to expose in your API. Tables, views and stored procedures in this schema will get API |
| 12 | +# endpoints. `public` and `graphql_public` schemas are included by default. |
| 13 | +schemas = ["public", "graphql_public"] |
| 14 | +# Extra schemas to add to the search_path of every request. |
| 15 | +extra_search_path = ["public", "extensions"] |
| 16 | +# The maximum number of rows returns from a view, table, or stored procedure. Limits payload size |
| 17 | +# for accidental or malicious requests. |
| 18 | +max_rows = 1000 |
| 19 | + |
| 20 | +[api.tls] |
| 21 | +# Enable HTTPS endpoints locally using a self-signed certificate. |
| 22 | +enabled = false |
| 23 | + |
| 24 | +[db] |
| 25 | +# Port to use for the local database URL. |
| 26 | +port = 54322 |
| 27 | +# Port used by db diff command to initialize the shadow database. |
| 28 | +shadow_port = 54320 |
| 29 | +# The database major version to use. This has to be the same as your remote database's. Run `SHOW |
| 30 | +# server_version;` on the remote database to check. |
| 31 | +major_version = 15 |
| 32 | + |
| 33 | +[db.pooler] |
| 34 | +enabled = false |
| 35 | +# Port to use for the local connection pooler. |
| 36 | +port = 54329 |
| 37 | +# Specifies when a server connection can be reused by other clients. |
| 38 | +# Configure one of the supported pooler modes: `transaction`, `session`. |
| 39 | +pool_mode = "transaction" |
| 40 | +# How many server connections to allow per user/database pair. |
| 41 | +default_pool_size = 20 |
| 42 | +# Maximum number of client connections allowed. |
| 43 | +max_client_conn = 100 |
| 44 | + |
| 45 | +# [db.vault] |
| 46 | +# secret_key = "env(SECRET_VALUE)" |
| 47 | + |
| 48 | +[db.migrations] |
| 49 | +# Specifies an ordered list of schema files that describe your database. |
| 50 | +# Supports glob patterns relative to supabase directory: "./schemas/*.sql" |
| 51 | +schema_paths = [] |
| 52 | + |
| 53 | +[db.seed] |
| 54 | +# If enabled, seeds the database after migrations during a db reset. |
| 55 | +enabled = true |
| 56 | +# Specifies an ordered list of seed files to load during db reset. |
| 57 | +# Supports glob patterns relative to supabase directory: "./seeds/*.sql" |
| 58 | +sql_paths = ["./seed.sql"] |
| 59 | + |
| 60 | +[realtime] |
| 61 | +enabled = true |
| 62 | +# Bind realtime via either IPv4 or IPv6. (default: IPv4) |
| 63 | +# ip_version = "IPv6" |
| 64 | +# The maximum length in bytes of HTTP request headers. (default: 4096) |
| 65 | +# max_header_length = 4096 |
| 66 | + |
| 67 | +[studio] |
| 68 | +enabled = true |
| 69 | +# Port to use for Supabase Studio. |
| 70 | +port = 54323 |
| 71 | +# External URL of the API server that frontend connects to. |
| 72 | +api_url = "http://127.0.0.1" |
| 73 | +# OpenAI API Key to use for Supabase AI in the Supabase Studio. |
| 74 | +openai_api_key = "env(OPENAI_API_KEY)" |
| 75 | + |
| 76 | +# Email testing server. Emails sent with the local dev setup are not actually sent - rather, they |
| 77 | +# are monitored, and you can view the emails that would have been sent from the web interface. |
| 78 | +[inbucket] |
| 79 | +enabled = true |
| 80 | +# Port to use for the email testing server web interface. |
| 81 | +port = 54324 |
| 82 | +# Uncomment to expose additional ports for testing user applications that send emails. |
| 83 | +# smtp_port = 54325 |
| 84 | +# pop3_port = 54326 |
| 85 | +# admin_email = "[email protected]" |
| 86 | +# sender_name = "Admin" |
| 87 | + |
| 88 | +[storage] |
| 89 | +enabled = true |
| 90 | +# The maximum file size allowed (e.g. "5MB", "500KB"). |
| 91 | +file_size_limit = "50MiB" |
| 92 | + |
| 93 | +# Image transformation API is available to Supabase Pro plan. |
| 94 | +# [storage.image_transformation] |
| 95 | +# enabled = true |
| 96 | + |
| 97 | +# Uncomment to configure local storage buckets |
| 98 | +# [storage.buckets.images] |
| 99 | +# public = false |
| 100 | +# file_size_limit = "50MiB" |
| 101 | +# allowed_mime_types = ["image/png", "image/jpeg"] |
| 102 | +# objects_path = "./images" |
| 103 | + |
| 104 | +[auth] |
| 105 | +enabled = true |
| 106 | +# The base URL of your website. Used as an allow-list for redirects and for constructing URLs used |
| 107 | +# in emails. |
| 108 | +site_url = "http://127.0.0.1:3000" |
| 109 | +# A list of *exact* URLs that auth providers are permitted to redirect to post authentication. |
| 110 | +additional_redirect_urls = ["https://127.0.0.1:3000"] |
| 111 | +# How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week). |
| 112 | +jwt_expiry = 3600 |
| 113 | +# If disabled, the refresh token will never expire. |
| 114 | +enable_refresh_token_rotation = true |
| 115 | +# Allows refresh tokens to be reused after expiry, up to the specified interval in seconds. |
| 116 | +# Requires enable_refresh_token_rotation = true. |
| 117 | +refresh_token_reuse_interval = 10 |
| 118 | +# Allow/disallow new user signups to your project. |
| 119 | +enable_signup = true |
| 120 | +# Allow/disallow anonymous sign-ins to your project. |
| 121 | +enable_anonymous_sign_ins = false |
| 122 | +# Allow/disallow testing manual linking of accounts |
| 123 | +enable_manual_linking = false |
| 124 | +# Passwords shorter than this value will be rejected as weak. Minimum 6, recommended 8 or more. |
| 125 | +minimum_password_length = 6 |
| 126 | +# Passwords that do not meet the following requirements will be rejected as weak. Supported values |
| 127 | +# are: `letters_digits`, `lower_upper_letters_digits`, `lower_upper_letters_digits_symbols` |
| 128 | +password_requirements = "" |
| 129 | + |
| 130 | +# Configure one of the supported captcha providers: `hcaptcha`, `turnstile`. |
| 131 | +# [auth.captcha] |
| 132 | +# enabled = true |
| 133 | +# provider = "hcaptcha" |
| 134 | +# secret = "" |
| 135 | + |
| 136 | +[auth.email] |
| 137 | +# Allow/disallow new user signups via email to your project. |
| 138 | +enable_signup = true |
| 139 | +# If enabled, a user will be required to confirm any email change on both the old, and new email |
| 140 | +# addresses. If disabled, only the new email is required to confirm. |
| 141 | +double_confirm_changes = true |
| 142 | +# If enabled, users need to confirm their email address before signing in. |
| 143 | +enable_confirmations = false |
| 144 | +# If enabled, users will need to reauthenticate or have logged in recently to change their password. |
| 145 | +secure_password_change = false |
| 146 | +# Controls the minimum amount of time that must pass before sending another signup confirmation or password reset email. |
| 147 | +max_frequency = "1s" |
| 148 | +# Number of characters used in the email OTP. |
| 149 | +otp_length = 6 |
| 150 | +# Number of seconds before the email OTP expires (defaults to 1 hour). |
| 151 | +otp_expiry = 3600 |
| 152 | + |
| 153 | +# Use a production-ready SMTP server |
| 154 | +# [auth.email.smtp] |
| 155 | +# enabled = true |
| 156 | +# host = "smtp.sendgrid.net" |
| 157 | +# port = 587 |
| 158 | +# user = "apikey" |
| 159 | +# pass = "env(SENDGRID_API_KEY)" |
| 160 | +# admin_email = "[email protected]" |
| 161 | +# sender_name = "Admin" |
| 162 | + |
| 163 | +# Uncomment to customize email template |
| 164 | +# [auth.email.template.invite] |
| 165 | +# subject = "You have been invited" |
| 166 | +# content_path = "./supabase/templates/invite.html" |
| 167 | + |
| 168 | +[auth.sms] |
| 169 | +# Allow/disallow new user signups via SMS to your project. |
| 170 | +enable_signup = false |
| 171 | +# If enabled, users need to confirm their phone number before signing in. |
| 172 | +enable_confirmations = false |
| 173 | +# Template for sending OTP to users |
| 174 | +template = "Your code is {{ .Code }}" |
| 175 | +# Controls the minimum amount of time that must pass before sending another sms otp. |
| 176 | +max_frequency = "5s" |
| 177 | + |
| 178 | +# Use pre-defined map of phone number to OTP for testing. |
| 179 | +# [auth.sms.test_otp] |
| 180 | +# 4152127777 = "123456" |
| 181 | + |
| 182 | +# Configure logged in session timeouts. |
| 183 | +# [auth.sessions] |
| 184 | +# Force log out after the specified duration. |
| 185 | +# timebox = "24h" |
| 186 | +# Force log out if the user has been inactive longer than the specified duration. |
| 187 | +# inactivity_timeout = "8h" |
| 188 | + |
| 189 | +# This hook runs before a token is issued and allows you to add additional claims based on the authentication method used. |
| 190 | +# [auth.hook.custom_access_token] |
| 191 | +# enabled = true |
| 192 | +# uri = "pg-functions://<database>/<schema>/<hook_name>" |
| 193 | + |
| 194 | +# Configure one of the supported SMS providers: `twilio`, `twilio_verify`, `messagebird`, `textlocal`, `vonage`. |
| 195 | +[auth.sms.twilio] |
| 196 | +enabled = false |
| 197 | +account_sid = "" |
| 198 | +message_service_sid = "" |
| 199 | +# DO NOT commit your Twilio auth token to git. Use environment variable substitution instead: |
| 200 | +auth_token = "env(SUPABASE_AUTH_SMS_TWILIO_AUTH_TOKEN)" |
| 201 | + |
| 202 | +# Multi-factor-authentication is available to Supabase Pro plan. |
| 203 | +[auth.mfa] |
| 204 | +# Control how many MFA factors can be enrolled at once per user. |
| 205 | +max_enrolled_factors = 10 |
| 206 | + |
| 207 | +# Control MFA via App Authenticator (TOTP) |
| 208 | +[auth.mfa.totp] |
| 209 | +enroll_enabled = false |
| 210 | +verify_enabled = false |
| 211 | + |
| 212 | +# Configure MFA via Phone Messaging |
| 213 | +[auth.mfa.phone] |
| 214 | +enroll_enabled = false |
| 215 | +verify_enabled = false |
| 216 | +otp_length = 6 |
| 217 | +template = "Your code is {{ .Code }}" |
| 218 | +max_frequency = "5s" |
| 219 | + |
| 220 | +# Configure MFA via WebAuthn |
| 221 | +# [auth.mfa.web_authn] |
| 222 | +# enroll_enabled = true |
| 223 | +# verify_enabled = true |
| 224 | + |
| 225 | +# Use an external OAuth provider. The full list of providers are: `apple`, `azure`, `bitbucket`, |
| 226 | +# `discord`, `facebook`, `github`, `gitlab`, `google`, `keycloak`, `linkedin_oidc`, `notion`, `twitch`, |
| 227 | +# `twitter`, `slack`, `spotify`, `workos`, `zoom`. |
| 228 | +[auth.external.apple] |
| 229 | +enabled = false |
| 230 | +client_id = "" |
| 231 | +# DO NOT commit your OAuth provider secret to git. Use environment variable substitution instead: |
| 232 | +secret = "env(SUPABASE_AUTH_EXTERNAL_APPLE_SECRET)" |
| 233 | +# Overrides the default auth redirectUrl. |
| 234 | +redirect_uri = "" |
| 235 | +# Overrides the default auth provider URL. Used to support self-hosted gitlab, single-tenant Azure, |
| 236 | +# or any other third-party OIDC providers. |
| 237 | +url = "" |
| 238 | +# If enabled, the nonce check will be skipped. Required for local sign in with Google auth. |
| 239 | +skip_nonce_check = false |
| 240 | + |
| 241 | +# Use Firebase Auth as a third-party provider alongside Supabase Auth. |
| 242 | +[auth.third_party.firebase] |
| 243 | +enabled = false |
| 244 | +# project_id = "my-firebase-project" |
| 245 | + |
| 246 | +# Use Auth0 as a third-party provider alongside Supabase Auth. |
| 247 | +[auth.third_party.auth0] |
| 248 | +enabled = false |
| 249 | +# tenant = "my-auth0-tenant" |
| 250 | +# tenant_region = "us" |
| 251 | + |
| 252 | +# Use AWS Cognito (Amplify) as a third-party provider alongside Supabase Auth. |
| 253 | +[auth.third_party.aws_cognito] |
| 254 | +enabled = false |
| 255 | +# user_pool_id = "my-user-pool-id" |
| 256 | +# user_pool_region = "us-east-1" |
| 257 | + |
| 258 | +[edge_runtime] |
| 259 | +enabled = true |
| 260 | +# Configure one of the supported request policies: `oneshot`, `per_worker`. |
| 261 | +# Use `oneshot` for hot reload, or `per_worker` for load testing. |
| 262 | +policy = "oneshot" |
| 263 | +# Port to attach the Chrome inspector for debugging edge functions. |
| 264 | +inspector_port = 8083 |
| 265 | + |
| 266 | +# Use these configurations to customize your Edge Function. |
| 267 | +# [functions.MY_FUNCTION_NAME] |
| 268 | +# enabled = true |
| 269 | +# verify_jwt = true |
| 270 | +# import_map = "./functions/MY_FUNCTION_NAME/deno.json" |
| 271 | +# Uncomment to specify a custom file path to the entrypoint. |
| 272 | +# Supported file extensions are: .ts, .js, .mjs, .jsx, .tsx |
| 273 | +# entrypoint = "./functions/MY_FUNCTION_NAME/index.ts" |
| 274 | +# Specifies static files to be bundled with the function. Supports glob patterns. |
| 275 | +# For example, if you want to serve static HTML pages in your function: |
| 276 | +# static_files = [ "./functions/MY_FUNCTION_NAME/*.html" ] |
| 277 | + |
| 278 | +[analytics] |
| 279 | +enabled = true |
| 280 | +port = 54327 |
| 281 | +# Configure one of the supported backends: `postgres`, `bigquery`. |
| 282 | +backend = "postgres" |
| 283 | + |
| 284 | +# Experimental features may be deprecated any time |
| 285 | +[experimental] |
| 286 | +# Configures Postgres storage engine to use OrioleDB (S3) |
| 287 | +orioledb_version = "" |
| 288 | +# Configures S3 bucket URL, eg. <bucket_name>.s3-<region>.amazonaws.com |
| 289 | +s3_host = "env(S3_HOST)" |
| 290 | +# Configures S3 bucket region, eg. us-east-1 |
| 291 | +s3_region = "env(S3_REGION)" |
| 292 | +# Configures AWS_ACCESS_KEY_ID for S3 bucket |
| 293 | +s3_access_key = "env(S3_ACCESS_KEY)" |
| 294 | +# Configures AWS_SECRET_ACCESS_KEY for S3 bucket |
| 295 | +s3_secret_key = "env(S3_SECRET_KEY)" |
0 commit comments