a tool for shared writing and social publishing
1# A string used to distinguish different Supabase projects on the same host. Defaults to the
2# working directory name when running `supabase init`.
3project_id = "minilink"
4
5[api]
6enabled = true
7# Port to use for the API URL.
8port = 54321
9# Schemas to expose in your API. Tables, views and stored procedures in this schema will get API
10# endpoints. `public` is always included.
11schemas = ["public", "graphql_public"]
12# Extra schemas to add to the search_path of every request. `public` is always included.
13extra_search_path = ["public", "extensions"]
14# The maximum number of rows returns from a view, table, or stored procedure. Limits payload size
15# for accidental or malicious requests.
16max_rows = 1000
17
18[db]
19# Port to use for the local database URL.
20port = 54322
21# Port used by db diff command to initialize the shadow database.
22shadow_port = 54320
23# The database major version to use. This has to be the same as your remote database's. Run `SHOW
24# server_version;` on the remote database to check.
25major_version = 15
26
27[db.pooler]
28enabled = false
29# Port to use for the local connection pooler.
30port = 54329
31# Specifies when a server connection can be reused by other clients.
32# Configure one of the supported pooler modes: `transaction`, `session`.
33pool_mode = "transaction"
34# How many server connections to allow per user/database pair.
35default_pool_size = 20
36# Maximum number of client connections allowed.
37max_client_conn = 100
38
39[realtime]
40enabled = true
41# Bind realtime via either IPv4 or IPv6. (default: IPv4)
42# ip_version = "IPv6"
43# The maximum length in bytes of HTTP request headers. (default: 4096)
44# max_header_length = 4096
45
46[studio]
47enabled = true
48# Port to use for Supabase Studio.
49port = 54323
50# External URL of the API server that frontend connects to.
51api_url = "http://127.0.0.1"
52# OpenAI API Key to use for Supabase AI in the Supabase Studio.
53openai_api_key = "env(OPENAI_API_KEY)"
54
55# Email testing server. Emails sent with the local dev setup are not actually sent - rather, they
56# are monitored, and you can view the emails that would have been sent from the web interface.
57[inbucket]
58enabled = true
59# Port to use for the email testing server web interface.
60port = 54324
61# Uncomment to expose additional ports for testing user applications that send emails.
62# smtp_port = 54325
63# pop3_port = 54326
64
65[storage]
66enabled = true
67# The maximum file size allowed (e.g. "5MB", "500KB").
68file_size_limit = "50MiB"
69
70[storage.image_transformation]
71enabled = true
72
73[auth]
74enabled = true
75# The base URL of your website. Used as an allow-list for redirects and for constructing URLs used
76# in emails.
77site_url = "http://127.0.0.1:3000"
78# A list of *exact* URLs that auth providers are permitted to redirect to post authentication.
79additional_redirect_urls = ["https://127.0.0.1:3000"]
80# How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week).
81jwt_expiry = 3600
82# If disabled, the refresh token will never expire.
83enable_refresh_token_rotation = true
84# Allows refresh tokens to be reused after expiry, up to the specified interval in seconds.
85# Requires enable_refresh_token_rotation = true.
86refresh_token_reuse_interval = 10
87# Allow/disallow new user signups to your project.
88enable_signup = true
89# Allow/disallow anonymous sign-ins to your project.
90enable_anonymous_sign_ins = false
91# Allow/disallow testing manual linking of accounts
92enable_manual_linking = false
93
94[auth.email]
95# Allow/disallow new user signups via email to your project.
96enable_signup = true
97# If enabled, a user will be required to confirm any email change on both the old, and new email
98# addresses. If disabled, only the new email is required to confirm.
99double_confirm_changes = true
100# If enabled, users need to confirm their email address before signing in.
101enable_confirmations = false
102# Controls the minimum amount of time that must pass before sending another signup confirmation or password reset email.
103max_frequency = "1s"
104
105# Uncomment to customize email template
106# [auth.email.template.invite]
107# subject = "You have been invited"
108# content_path = "./supabase/templates/invite.html"
109
110[auth.sms]
111# Allow/disallow new user signups via SMS to your project.
112enable_signup = true
113# If enabled, users need to confirm their phone number before signing in.
114enable_confirmations = false
115# Template for sending OTP to users
116template = "Your code is {{ .Code }} ."
117# Controls the minimum amount of time that must pass before sending another sms otp.
118max_frequency = "5s"
119
120# Use pre-defined map of phone number to OTP for testing.
121# [auth.sms.test_otp]
122# 4152127777 = "123456"
123
124# This hook runs before a token is issued and allows you to add additional claims based on the authentication method used.
125# [auth.hook.custom_access_token]
126# enabled = true
127# uri = "pg-functions://<database>/<schema>/<hook_name>"
128
129# Configure one of the supported SMS providers: `twilio`, `twilio_verify`, `messagebird`, `textlocal`, `vonage`.
130[auth.sms.twilio]
131enabled = false
132account_sid = ""
133message_service_sid = ""
134# DO NOT commit your Twilio auth token to git. Use environment variable substitution instead:
135auth_token = "env(SUPABASE_AUTH_SMS_TWILIO_AUTH_TOKEN)"
136
137# Use an external OAuth provider. The full list of providers are: `apple`, `azure`, `bitbucket`,
138# `discord`, `facebook`, `github`, `gitlab`, `google`, `keycloak`, `linkedin_oidc`, `notion`, `twitch`,
139# `twitter`, `slack`, `spotify`, `workos`, `zoom`.
140[auth.external.apple]
141enabled = false
142client_id = ""
143# DO NOT commit your OAuth provider secret to git. Use environment variable substitution instead:
144secret = "env(SUPABASE_AUTH_EXTERNAL_APPLE_SECRET)"
145# Overrides the default auth redirectUrl.
146redirect_uri = ""
147# Overrides the default auth provider URL. Used to support self-hosted gitlab, single-tenant Azure,
148# or any other third-party OIDC providers.
149url = ""
150# If enabled, the nonce check will be skipped. Required for local sign in with Google auth.
151skip_nonce_check = false
152
153[analytics]
154enabled = false
155port = 54327
156vector_port = 54328
157# Configure one of the supported backends: `postgres`, `bigquery`.
158backend = "postgres"
159
160# Experimental features may be deprecated any time
161[experimental]
162# Configures Postgres storage engine to use OrioleDB (S3)
163orioledb_version = ""
164# Configures S3 bucket URL, eg. <bucket_name>.s3-<region>.amazonaws.com
165s3_host = "env(S3_HOST)"
166# Configures S3 bucket region, eg. us-east-1
167s3_region = "env(S3_REGION)"
168# Configures AWS_ACCESS_KEY_ID for S3 bucket
169s3_access_key = "env(S3_ACCESS_KEY)"
170# Configures AWS_SECRET_ACCESS_KEY for S3 bucket
171s3_secret_key = "env(S3_SECRET_KEY)"