digitalocean/supabase-on-do

digitalocean/supabase-on-do

Language: HCL

License: Apache-2.0

Stars: 265

Forks: 38

Open issues: 16

Created: 2023-01-26T15:30:18Z

Pushed: 2024-05-14T21:14:06Z

Default branch: main

Fork: no

Archived: no

README:

Supabase on DigitalOcean

Supabase is a backend-as-a-service platform built around the Postgres database, and is an Open Source alternative to Firebase. It can reduce time to market by providing a ready to use backend that includes a database with real time capabilities, authentication, object storage and edge functions. You can use Supabase as a service via their managed offerings or self-host it on your own server or on a cloud provider.

Running Supabase on DigitalOcean

We will self-host Supabase by deploying the following architecture. 

Docker Compose

The components that make up Supabase will be running via a [docker-compose.yml](./packer/supabase/docker-compose.yml) file. The following is taken directly from the Supabase self-hosting documentation page and provides a description of each of its components:

> - Kong is a cloud-native API gateway. > - GoTrue is an SWT based API for managing users and issuing SWT tokens. > - PostgREST is a web server that turns your PostgreSQL database directly into a RESTful API > - Realtime is an Elixir server that allows you to listen to PostgreSQL inserts, updates, and deletes using websockets. Realtime pollsPostgres' built-in replication functionality for database changes, converts changes to JSON, then broadcasts the JSON over websockets to authorized clients. > - Storage provides a RESTful interface for managing Files stored in S3, using Postgres to manage permissions. > - postgres-meta is a RESTful API for managing your Postgres, allowing you to fetch tables, add roles, and run queries, etc. > - PostgreSQL is an object-relational database system with over 30 years of active development that has earned it a strong reputation for reliability, feature robustness, and performance.

In addition to the above components, the docker-compose file also runs swag. SWAG (Secure Web Application Gateway) provides an Nginx webserver and reverse proxy with a built-in certbot client that automates free SSL certificate generation and renewal. It also contains fail2ban for added intrusion prevention. As swag deploys Nginx we will also use it to setup basic authentication to protect access to studio (the dashboard component of Supabase).

DigitalOcean Components

All of the above will be running on a DigitalOcean Droplet. Persistent storage for the database is provided via a Volume attached to the Droplet and object storage, for artifacts like profile pics and more, will be achieved using Spaces. A Domain, Reserved IP and Firewall are also setup to ensure we can securely access our Supabase instance from the web.

SendGrid

Supabase's auth component, GoTrue, requires the ability to send emails. As DigitalOcean blocks Port 25 on all Droplets for new accounts (IP reputation being a main reason for this as well as other factors) we will use SendGrid to send emails. SendGrid offers a generous free plan of 100 emails/day which should suffice for most use cases.

Packer and Terraform

At DigitalOcean simplicity in all we DO is one of our core values, and automating as much as possible of our processes enables us to achieve this. In this regard we will use Packer and Terraform to automate the build and provision the resources.

Pre-requisites

• DigitalOcean account (Haven't got one? Start your free trail now and grab $200 in credits.);
• SendGrid account (You can signup for free);
• packer cli;
• terraform cli;
• curl installed on your machine (if you are running a *nix or Mac OS there is a 99.9% chance of you already having this installed. For Windows users use WSL);
• A Domain you own added to DigitalOceans' Domain section and the nameservers in your chosen domain registrar pointed towards DigitalOceans' own NS records(docs).

The Manual Part

• Create a DigitalOcean API token with read/write permissions (docs)
• Create a DO Spaces access key and secret (docs)
• Create a Domain in DO and change nameservers in your domain registrar (docs)
• Create an admin (full access) SendGrid API token (docs)
• (_Optional_) If using Terraform Cloud to manage your state file, create a user API token

The (Semi-)Automated Part

_We're going to run some cli commands within our terminal which can be automated within a CI/CD process._

Once we've setup and created all of the above, clone the repository:

git clone https://github.com/digitalocean/supabase-on-do.git
cd supabase-on-do

1. After cloning the repo, our next…