Supabase Docker

This repository makes it easy to run Supabase with Docker by removing external dependencies and simplifying the configuration process, without requiring shell access or additional setup steps. The project follows the same spirit of streamlined deployment popularized by LinuxServer.

Contribution

• Give a star
• Consider a donation
• Ask to Supabase to provide a setup like this
• Open an issue or Send a PR

Major Problems Fixed

• Extensive variable interpolation
• Fully managed via entrypoint and healthcheck
• Setup files embedded directly into the Docker image
• Security:
  • All containers isolated within an internal network
  • Variables restricted unless shared across multiple containers
• No need to clone the repository
• No need to copy files
• Docker Compose reduced from ~500 lines to fewer than 200
• .env file minimized to include only required values

Limitations

• S3-based versions were skipped for now
• Other cloud-specific features (GCP/AWS-style) were not included
• Only essential variables are left (the commented ENV in docker compose original are removed)

System Requirements

Caution

Simply starting all images requires nearly 4 GB of RAM.

If you don’t need the full feature set, consider using PocketBase (pocketback-docker).

Setup

Compose

To deploy, only the docker-compose.yml and .env is necessary.

Let's generate the keys that will need:

docker run ghcr.io/webysther/supabase-keys

The expected output:

ANON_KEY=eyJhbGciOiJIUzI1Ni...xu1mKbtI01cPB3VK58Habi3g
SERVICE_ROLE_KEY=eyJhbGciOi...Tmm_l2nVyj4JT4m2-9dO02Vw

JWT_SECRET=AFEIXyUU889o/SSRuwNgcUck9oqf+7nmouw+bieU
SECRET_KEY_BASE=HtwfNG7wM80...yIU2gGhn7uOoPgzr+q90xZhTdV
VAULT_ENC_KEY=8e4db5495998f13f69057403f65e0746
PG_META_CRYPTO_KEY=zIKlK0K1O6Wid0/WD5aRSoCdrRkj04s1
LOGFLARE_PUBLIC_ACCESS_TOKEN=gbgsCqL7IrsmMlqwJqerWSUuVv+mKmVX
LOGFLARE_PRIVATE_ACCESS_TOKEN=S3ZRbCRL0SkUGdqlJF1nF9gQUWyH+14V
POOLER_TENANT_ID=5c9dadc3759f87bd
DB_ENC_KEY=ff4095bf08ac5244899b38aff1350fdf

POSTGRES_PASSWORD=5d4a981d933446a83a338b81ebadbefe
DASHBOARD_PASSWORD=0881e0ecaa127ec5a65004e9d2d0252b

Add to .env file and deploy:

docker compose up

Remove all:

docker compose down -v

Portainer

Change the x-common to point to .env style of portainer and you are good to go.

Reverse proxy

Above the table of ports:

Port	Service
5432	Pooler
6543	Pooler
4000	Analytics
8000	API Gateway (http)
8443	API Gateway (https)

Volumes

Only the db-config is necessary to be named volume. Volumes are used to speedup the test.

Debug

If a specific service fail, run only this service (eg. vector):

./build.sh vector --test

Optimizations

• Merge some images in just one
• Maybe build an AIO image