mirror of
https://github.com/Dokploy/templates.git
synced 2026-07-15 23:02:03 -05:00
[PR #907] Claude/update supabase latest x4r5n #8748
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
📋 Pull Request Information
Original PR: https://github.com/Dokploy/templates/pull/907
Author: @mtalhazulf
Created: 5/23/2026
Status: 🔄 Open
Base:
canary← Head:claude/update-supabase-latest-X4r5n📝 Commits (10+)
4902cbfNew Version (#737)8815231Add supabase-2026.04 blueprint with latest Supabase versions6244f33Merge pull request #2 from Dokploy/canary63d95eesupabase-2026.04: drop container_name, route logs by service labelf0060ecsupabase-2026.04: drop explicit networks, use kong upstream for realtimed80d4c7supabase-2026.04: fix vector healthcheck and self-log exclusion488f02fsupabase-2026.04: make vector.yml compatible with Vector 0.53ebbfa59supabase-2026.04: render kong config to /tmp (non-root kong user)2d6a53fsupabase-2026.04: use awk-based kong entrypoint script for kong 3.903b20bbsupabase-2026.04: align auth keys with self-hosted-auth-keys standard📊 Changes
4 files changed (+1828 additions, -0 deletions)
View changed files
➕
blueprints/supabase-2026.04/docker-compose.yml(+595 -0)➕
blueprints/supabase-2026.04/supabase.svg(+15 -0)➕
blueprints/supabase-2026.04/template.toml(+1200 -0)📝
meta.json(+18 -0)📄 Description
What is this PR about?
New PR of SupaBase (2026.04) — a refreshed self-hosted Supabase blueprint at
blueprints/supabase-2026.04, added alongside the existingsupabaseblueprint (which is left untouched, so current users are unaffected and can migrate when ready).It updates the whole stack to the latest upstream releases and brings the blueprint into full compliance with the Dokploy template validator.
Image updates (all 13 services)
Config changes synced from upstream Supabase
LOGFLARE_API_KEY→LOGFLARE_PUBLIC_ACCESS_TOKEN+LOGFLARE_PRIVATE_ACCESS_TOKEN;vector.ymlsinks moved to thex-api-keyheader format and the config is updated for Vector 0.53 (e.g.parse_timestamp!replaces the removedto_timestamp!).IMGPROXY_ENABLE_WEBP_DETECTION→IMGPROXY_AUTO_WEBP; addedIMGPROXY_MAX_SRC_RESOLUTION.PG_META_CRYPTO_KEYandS3_PROTOCOL_ACCESS_KEY_ID/SECRET(auto-generated by Dokploy helpers).JWT_SECRET/ANON_KEY/SERVICE_ROLE_KEY) are generated with the standard{role, iss, iat, exp}payload; the optional asymmetric ES256 / opaque keys (JWT_KEYS,JWT_JWKS,SUPABASE_PUBLISHABLE_KEY,SUPABASE_SECRET_KEY,ANON_KEY_ASYMMETRIC,SERVICE_ROLE_KEY_ASYMMETRIC) are left empty by design (they require per-install EC keypair generation and must not be shared across deployments) with documented enable steps.restnow usesPGRST_JWT_SECRET: ${JWT_JWKS:-${JWT_SECRET}};auth/realtime/storagecarry commented JWKS lines to enable after generating keys.request-termination,ip-restriction,post-function),KONG_DNS_NOT_FOUND_TTL,KONG_PROXY_ACCESS_LOG; kong now uses anawk-based entrypoint script (the oldeval/echotemplating broke YAML quoting andkong/kong:3.9runs as a non-root user with/entrypoint.sh).deno-cachenamed volume.Checklist
Issues related (if applicable)
N/A
Screenshots or Videos
Deployed and verified end-to-end on a live Dokploy instance — all 13 services healthy, Studio dashboard reachable, API/Storage working.
Demo video: https://www.loom.com/share/55b3f1d2db9245dda5f533997b45debd
🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.