Refactor Supabase services in docker-compose.yml for better organization and testing

- Commented out all Supabase services to facilitate testing with Supabase CLI.
- Updated README to include Supabase directory in project structure.
- Adjusted documentation for migration paths in Supabase Docker Compose guide.
- Enhanced docker-compose-reset.sh to explicitly remove Supabase volumes and wait for migrations to complete.
This commit is contained in:
salirezav
2025-12-18 18:27:04 -05:00
parent 93c68768d8
commit 8cb45cbe03
28 changed files with 7264 additions and 253 deletions

View File

@@ -8,250 +8,297 @@ volumes:
supabase-storage:
services:
# Supabase Database
supabase-db:
container_name: usda-vision-supabase-db
image: supabase/postgres:17.1.0.147
healthcheck:
test: ["CMD-SHELL", "pg_isready -U postgres"]
interval: 10s
timeout: 5s
retries: 5
volumes:
- supabase-db:/var/lib/postgresql/data
environment:
POSTGRES_HOST: /var/run/postgresql
PGPORT: 5432
POSTGRES_PORT: 5432
PGDATABASE: postgres
POSTGRES_DB: postgres
PGUSER: supabase_admin
POSTGRES_USER: supabase_admin
PGPASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
JWT_EXP: ${JWT_EXP:-3600}
ports:
- "54322:5432"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase PostgREST API
supabase-rest:
container_name: usda-vision-supabase-rest
image: postgrest/postgrest:v12.2.0
depends_on:
supabase-db:
condition: service_healthy
supabase-migrate:
condition: service_completed_successfully
environment:
PGRST_DB_URI: postgres://authenticator:${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}@supabase-db:5432/postgres
PGRST_DB_SCHEMAS: public,graphql_public
PGRST_DB_EXTRA_SEARCH_PATH: public,extensions
PGRST_DB_ANON_ROLE: anon
PGRST_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
PGRST_DB_USE_LEGACY_GUCS: "false"
PGRST_APP_SETTINGS_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
PGRST_APP_SETTINGS_JWT_EXP: ${JWT_EXP:-3600}
ports:
- "54321:3000"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase GoTrue (Auth)
supabase-auth:
container_name: usda-vision-supabase-auth
image: supabase/gotrue:v2.156.0
depends_on:
supabase-db:
condition: service_healthy
environment:
GOTRUE_API_HOST: 0.0.0.0
GOTRUE_API_PORT: 9999
API_EXTERNAL_URL: http://localhost:54321
GOTRUE_DB_DRIVER: postgres
GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}@supabase-db:5432/postgres
GOTRUE_SITE_URL: http://localhost:8080
GOTRUE_URI_ALLOW_LIST: http://localhost:8080,http://localhost:3000,https://localhost:3000
GOTRUE_DISABLE_SIGNUP: "false"
GOTRUE_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
GOTRUE_JWT_EXP: ${JWT_EXP:-3600}
GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
GOTRUE_EXTERNAL_EMAIL_ENABLED: "true"
GOTRUE_MAILER_AUTOCONFIRM: "true"
GOTRUE_SMS_AUTOCONFIRM: "true"
GOTRUE_SMS_PROVIDER: twilio
GOTRUE_ENABLE_SIGNUP: "true"
GOTRUE_ENABLE_ANONYMOUS_SIGN_INS: "false"
GOTRUE_ENABLE_MANUAL_LINKING: "false"
GOTRUE_PASSWORD_MIN_LENGTH: 6
GOTRUE_REFRESH_TOKEN_ROTATION_ENABLED: "true"
GOTRUE_REFRESH_TOKEN_REUSE_INTERVAL: 10
ports:
- "9999:9999"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase Realtime
supabase-realtime:
container_name: usda-vision-supabase-realtime
image: supabase/realtime:v2.30.25
depends_on:
supabase-db:
condition: service_healthy
supabase-rest:
condition: service_started
environment:
PORT: 4000
DB_HOST: supabase-db
DB_PORT: 5432
DB_USER: supabase_realtime_admin
DB_PASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
DB_NAME: postgres
DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime'
DB_ENC_KEY: supabaserealtime
API_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
FLY_ALLOC_ID: fly123
FLY_APP_NAME: realtime
SECRET_KEY_BASE: UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq
ERL_AFLAGS: -proto_dist inet_tcp
ENABLE_TAILSCALE: "false"
DNS_NODES: "''"
ports:
- "4000:4000"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase Storage
supabase-storage:
container_name: usda-vision-supabase-storage
image: supabase/storage-api:v1.11.8
depends_on:
supabase-db:
condition: service_healthy
supabase-rest:
condition: service_started
environment:
ANON_KEY: ${ANON_KEY:-[REDACTED]}
SERVICE_KEY: ${SERVICE_KEY:-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU}
POSTGREST_URL: http://supabase-rest:3000
PGRST_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
DATABASE_URL: postgres://supabase_storage_admin:${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}@supabase-db:5432/postgres
FILE_SIZE_LIMIT: 52428800
STORAGE_BACKEND: file
FILE_STORAGE_BACKEND_PATH: /var/lib/storage
TENANT_ID: stub
REGION: stub
GLOBAL_S3_BUCKET: stub
ENABLE_IMAGE_TRANSFORMATION: "false"
volumes:
- supabase-storage:/var/lib/storage
ports:
- "5000:5000"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase Studio
supabase-studio:
container_name: usda-vision-supabase-studio
image: supabase/studio:20241218-5c0e5a0
depends_on:
supabase-rest:
condition: service_started
supabase-auth:
condition: service_started
environment:
STUDIO_PG_META_URL: http://supabase-meta:8080
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
DEFAULT_ORGANIZATION_NAME: Default Organization
DEFAULT_PROJECT_NAME: Default Project
SUPABASE_URL: http://supabase-rest:3000
SUPABASE_PUBLIC_URL: http://localhost:54321
SUPABASE_ANON_KEY: ${ANON_KEY:-[REDACTED]}
SUPABASE_SERVICE_KEY: ${SERVICE_KEY:-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU}
ports:
- "54323:3000"
networks:
- usda-vision-network
restart: unless-stopped
# Supabase Meta (for Studio)
supabase-meta:
container_name: usda-vision-supabase-meta
image: supabase/postgres-meta:v0.88.0
depends_on:
supabase-db:
condition: service_healthy
environment:
PG_META_PORT: 8080
PG_META_DB_HOST: supabase-db
PG_META_DB_PORT: 5432
PG_META_DB_NAME: postgres
PG_META_DB_USER: supabase_admin
PG_META_DB_PASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
ports:
- "54328:8080"
networks:
- usda-vision-network
restart: unless-stopped
# Migration Runner - runs migrations after database is ready
supabase-migrate:
container_name: usda-vision-supabase-migrate
image: postgres:17-alpine
depends_on:
supabase-db:
condition: service_healthy
environment:
PGHOST: supabase-db
PGPORT: 5432
PGDATABASE: postgres
PGUSER: supabase_admin
PGPASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
volumes:
- ./management-dashboard-web-app/supabase/migrations:/migrations:ro
- ./management-dashboard-web-app/supabase/seed_01_users.sql:/seed_01_users.sql:ro
- ./management-dashboard-web-app/supabase/seed_02_phase2_experiments.sql:/seed_02_phase2_experiments.sql:ro
command: >
sh -c "
echo 'Waiting for database to be ready...';
until pg_isready -h supabase-db -p 5432 -U supabase_admin; do
sleep 2;
done;
echo 'Database is ready. Running migrations...';
for migration in /migrations/*.sql; do
if [ -f \"\$$migration\" ]; then
echo \"Running migration: \$$(basename \$$migration)\";
psql -h supabase-db -U supabase_admin -d postgres -f \$$migration || echo \"Migration \$$(basename \$$migration) may have already been applied\";
fi;
done;
echo 'Running seed files...';
psql -h supabase-db -U supabase_admin -d postgres -f /seed_01_users.sql || echo 'Seed 01 may have already been applied';
psql -h supabase-db -U supabase_admin -d postgres -f /seed_02_phase2_experiments.sql || echo 'Seed 02 may have already been applied';
echo 'Migrations and seeds completed!';
"
networks:
- usda-vision-network
restart: "no"
# Supabase Inbucket (Email Testing)
supabase-inbucket:
container_name: usda-vision-supabase-inbucket
image: inbucket/inbucket:stable
ports:
- "54324:9000"
- "54325:2500"
- "54326:1100"
networks:
- usda-vision-network
restart: unless-stopped
# ============================================================================
# Supabase Services (Database & Backend) - COMMENTED OUT
# ============================================================================
# All Supabase services are grouped together and labeled with "supabase"
# namespace for better organization. They start by default with all services.
# To manage Supabase services separately, use:
# - Filter by label: docker compose ps --filter "label=com.usda-vision.service=supabase"
# - Or use service names: docker compose ps supabase-*
#
# NOTE: Currently commented out to test Supabase CLI setup from management-dashboard-web-app
# # # Supabase Database
# # supabase-db:
# container_name: usda-vision-supabase-db
# image: public.ecr.aws/supabase/postgres:17.4.1.068
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=database"
# healthcheck:
# test: ["CMD-SHELL", "pg_isready -U postgres -d postgres"]
# interval: 10s
# timeout: 5s
# retries: 5
# start_period: 30s
# volumes:
# - supabase-db:/var/lib/postgresql/data
# environment:
# POSTGRES_HOST: /var/run/postgresql
# PGPORT: 5432
# POSTGRES_PORT: 5432
# PGDATABASE: postgres
# POSTGRES_DB: postgres
# # Use postgres as the default user (Supabase image will create supabase_admin during init)
# PGUSER: postgres
# POSTGRES_USER: postgres
# PGPASSWORD: ${POSTGRES_PASSWORD:-postgres}
# POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
# # Supabase-specific environment variables
# JWT_SECRET: ${JWT_SECRET:-super-secret-jwt-token-with-at-least-32-characters-long}
# JWT_EXP: ${JWT_EXP:-3600}
# ports:
# - "54322:5432"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase PostgREST API
# supabase-rest:
# container_name: usda-vision-supabase-rest
# image: public.ecr.aws/supabase/postgrest:v12.2.12
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=api"
# depends_on:
# supabase-db:
# condition: service_healthy
# supabase-migrate:
# condition: service_completed_successfully
# environment:
# PGRST_DB_URI: postgres://authenticator:${POSTGRES_PASSWORD:-postgres}@supabase-db:5432/postgres
# PGRST_DB_SCHEMAS: public,graphql_public
# PGRST_DB_EXTRA_SEARCH_PATH: public,extensions
# PGRST_DB_ANON_ROLE: anon
# PGRST_JWT_SECRET: ${JWT_SECRET:-super-secret-jwt-token-with-at-least-32-characters-long}
# PGRST_DB_USE_LEGACY_GUCS: "false"
# PGRST_APP_SETTINGS_JWT_SECRET: ${JWT_SECRET:-your-super-secret-jwt-token-with-at-least-32-characters-long}
# PGRST_APP_SETTINGS_JWT_EXP: ${JWT_EXP:-3600}
# ports:
# - "54321:3000"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase GoTrue (Auth)
# supabase-auth:
# container_name: usda-vision-supabase-auth
# image: public.ecr.aws/supabase/gotrue:v2.177.0
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=auth"
# depends_on:
# supabase-db:
# condition: service_healthy
# environment:
# GOTRUE_API_HOST: 0.0.0.0
# GOTRUE_API_PORT: 9999
# API_EXTERNAL_URL: http://localhost:54321
# GOTRUE_DB_DRIVER: postgres
# GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${POSTGRES_PASSWORD:-postgres}@supabase-db:5432/postgres
# GOTRUE_SITE_URL: http://localhost:8080
# GOTRUE_URI_ALLOW_LIST: http://localhost:8080,http://localhost:3000,https://localhost:3000
# GOTRUE_DISABLE_SIGNUP: "false"
# GOTRUE_JWT_SECRET: ${JWT_SECRET:-super-secret-jwt-token-with-at-least-32-characters-long}
# GOTRUE_JWT_EXP: ${JWT_EXP:-3600}
# GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
# GOTRUE_EXTERNAL_EMAIL_ENABLED: "true"
# GOTRUE_MAILER_AUTOCONFIRM: "true"
# GOTRUE_SMS_AUTOCONFIRM: "true"
# GOTRUE_SMS_PROVIDER: twilio
# GOTRUE_ENABLE_SIGNUP: "true"
# GOTRUE_ENABLE_ANONYMOUS_SIGN_INS: "false"
# GOTRUE_ENABLE_MANUAL_LINKING: "false"
# GOTRUE_PASSWORD_MIN_LENGTH: 6
# GOTRUE_REFRESH_TOKEN_ROTATION_ENABLED: "true"
# GOTRUE_REFRESH_TOKEN_REUSE_INTERVAL: 10
# ports:
# - "9999:9999"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase Realtime
# supabase-realtime:
# container_name: usda-vision-supabase-realtime
# image: public.ecr.aws/supabase/realtime:v2.41.10
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=realtime"
# depends_on:
# supabase-db:
# condition: service_healthy
# supabase-rest:
# condition: service_started
# environment:
# PORT: 4000
# DB_HOST: supabase-db
# DB_PORT: 5432
# DB_USER: supabase_realtime_admin
# DB_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
# DB_NAME: postgres
# DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime'
# DB_ENC_KEY: supabaserealtime
# API_JWT_SECRET: ${JWT_SECRET:-super-secret-jwt-token-with-at-least-32-characters-long}
# FLY_ALLOC_ID: fly123
# FLY_APP_NAME: realtime
# SECRET_KEY_BASE: UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq
# ERL_AFLAGS: -proto_dist inet_tcp
# ENABLE_TAILSCALE: "false"
# DNS_NODES: "''"
# ports:
# - "4000:4000"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase Storage
# supabase-storage:
# container_name: usda-vision-supabase-storage
# image: public.ecr.aws/supabase/storage-api:v1.25.12
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=storage"
# depends_on:
# supabase-db:
# condition: service_healthy
# supabase-rest:
# condition: service_started
# environment:
# ANON_KEY: ${ANON_KEY:-[REDACTED]}
# SERVICE_KEY: ${SERVICE_KEY:-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU}
# POSTGREST_URL: http://supabase-rest:3000
# PGRST_JWT_SECRET: ${JWT_SECRET:-super-secret-jwt-token-with-at-least-32-characters-long}
# DATABASE_URL: postgres://supabase_storage_admin:${POSTGRES_PASSWORD:-postgres}@supabase-db:5432/postgres
# FILE_SIZE_LIMIT: 52428800
# STORAGE_BACKEND: file
# FILE_STORAGE_BACKEND_PATH: /var/lib/storage
# TENANT_ID: stub
# REGION: stub
# GLOBAL_S3_BUCKET: stub
# ENABLE_IMAGE_TRANSFORMATION: "false"
# volumes:
# - supabase-storage:/var/lib/storage
# ports:
# - "5000:5000"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase Studio
# supabase-studio:
# container_name: usda-vision-supabase-studio
# image: public.ecr.aws/supabase/studio:2025.07.28-sha-578b707
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=studio"
# depends_on:
# supabase-rest:
# condition: service_started
# supabase-auth:
# condition: service_started
# environment:
# STUDIO_PG_META_URL: http://supabase-meta:8080
# POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:-postgres}
# DEFAULT_ORGANIZATION_NAME: Default Organization
# DEFAULT_PROJECT_NAME: Default Project
# SUPABASE_URL: http://supabase-rest:3000
# SUPABASE_PUBLIC_URL: http://localhost:54321
# SUPABASE_ANON_KEY: ${ANON_KEY:-[REDACTED]}
# SUPABASE_SERVICE_KEY: ${SERVICE_KEY:-eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU}
# ports:
# - "54323:3000"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Supabase Meta (for Studio)
# supabase-meta:
# container_name: usda-vision-supabase-meta
# image: public.ecr.aws/supabase/postgres-meta:v0.91.3
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=meta"
# depends_on:
# supabase-db:
# condition: service_healthy
# environment:
# PG_META_PORT: 8080
# PG_META_DB_HOST: supabase-db
# PG_META_DB_PORT: 5432
# PG_META_DB_NAME: postgres
# PG_META_DB_USER: supabase_admin
# PG_META_DB_PASSWORD: ${POSTGRES_PASSWORD:-your-super-secret-and-long-postgres-password}
# ports:
# - "54328:8080"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
# # Migration Runner - runs migrations after database is ready
# supabase-migrate:
# container_name: usda-vision-supabase-migrate
# image: postgres:17-alpine
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=migration"
# depends_on:
# supabase-db:
# condition: service_healthy
# environment:
# PGHOST: supabase-db
# PGPORT: 5432
# PGDATABASE: postgres
# PGUSER: postgres
# PGPASSWORD: ${POSTGRES_PASSWORD:-postgres}
# volumes:
# - ./supabase/migrations:/migrations:ro
# - ./supabase/seed_01_users.sql:/seed_01_users.sql:ro
# - ./supabase/seed_02_phase2_experiments.sql:/seed_02_phase2_experiments.sql:ro
# command: >
# sh -c "
# echo 'Waiting for database to be ready...';
# until pg_isready -h supabase-db -p 5432 -U postgres -d postgres; do
# sleep 2;
# done;
# echo 'Waiting for Supabase initialization to complete...';
# # Wait for Supabase schemas to be initialized (auth schema is a good indicator)
# until psql -h supabase-db -U postgres -d postgres -tc \"SELECT 1 FROM information_schema.schemata WHERE schema_name = 'auth'\" | grep -q 1; do
# echo ' Waiting for Supabase schemas...';
# sleep 3;
# done;
# echo 'Database and Supabase schemas are ready. Running migrations...';
# for migration in /migrations/*.sql; do
# if [ -f \"\$$migration\" ]; then
# echo \"Running migration: \$$(basename \$$migration)\";
# psql -h supabase-db -U postgres -d postgres -f \$$migration || echo \"Migration \$$(basename \$$migration) may have already been applied\";
# fi;
# done;
# echo 'Running seed files...';
# psql -h supabase-db -U postgres -d postgres -f /seed_01_users.sql || echo 'Seed 01 may have already been applied';
# psql -h supabase-db -U postgres -d postgres -f /seed_02_phase2_experiments.sql || echo 'Seed 02 may have already been applied';
# echo 'Migrations and seeds completed!';
# "
# networks:
# - usda-vision-network
# restart: "no"
#
# # Supabase Inbucket (Email Testing)
# supabase-inbucket:
# container_name: usda-vision-supabase-inbucket
# image: inbucket/inbucket:stable
# labels:
# - "com.usda-vision.service=supabase"
# - "com.usda-vision.service.group=email"
# ports:
# - "54324:9000"
# - "54325:2500"
# - "54326:1100"
# networks:
# - usda-vision-network
# restart: unless-stopped
#
api:
container_name: usda-vision-api
build:
@@ -342,11 +389,12 @@ services:
- "8080:8080"
networks:
- usda-vision-network
depends_on:
supabase-rest:
condition: service_started
supabase-auth:
condition: service_started
# depends_on:
# supabase-rest:
# condition: service_started
# supabase-auth:
# condition: service_started
# NOTE: Supabase dependencies commented out - using Supabase CLI instead
video-remote:
container_name: usda-vision-video-remote