From 471488f5f7ed9af8cdfdb4fa698c9454155f0b76 Mon Sep 17 00:00:00 2001 From: qzl Date: Thu, 26 Mar 2026 13:37:26 +0800 Subject: [PATCH] feat: enable MCP server for self-hosted Supabase --- infra/docker/supabase/docker-compose.yml | 2 +- infra/docker/supabase/volumes/api/kong.yml | 1 + infra/docker/supabase/volumes/db/roles.sql | 1 + 3 files changed, 3 insertions(+), 1 deletion(-) diff --git a/infra/docker/supabase/docker-compose.yml b/infra/docker/supabase/docker-compose.yml index 9d4fbe3..6f00246 100644 --- a/infra/docker/supabase/docker-compose.yml +++ b/infra/docker/supabase/docker-compose.yml @@ -207,7 +207,7 @@ services: KONG_DECLARATIVE_CONFIG: /usr/local/kong/kong.yml KONG_DNS_ORDER: LAST,A,CNAME KONG_DNS_NOT_FOUND_TTL: 1 - KONG_PLUGINS: request-transformer,cors,key-auth,acl,post-function,basic-auth + KONG_PLUGINS: request-transformer,cors,key-auth,acl,post-function,basic-auth,ip-restriction SUPABASE_ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY} SUPABASE_SERVICE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY} SUPABASE_PUBLISHABLE_KEY: "" diff --git a/infra/docker/supabase/volumes/api/kong.yml b/infra/docker/supabase/volumes/api/kong.yml index 985ffbe..1e6074e 100644 --- a/infra/docker/supabase/volumes/api/kong.yml +++ b/infra/docker/supabase/volumes/api/kong.yml @@ -168,4 +168,5 @@ services: allow: - 127.0.0.1 - ::1 + - 172.18.0.1 deny: [] diff --git a/infra/docker/supabase/volumes/db/roles.sql b/infra/docker/supabase/volumes/db/roles.sql index 8f7161a..db3d152 100644 --- a/infra/docker/supabase/volumes/db/roles.sql +++ b/infra/docker/supabase/volumes/db/roles.sql @@ -6,3 +6,4 @@ ALTER USER pgbouncer WITH PASSWORD :'pgpass'; ALTER USER supabase_auth_admin WITH PASSWORD :'pgpass'; ALTER USER supabase_functions_admin WITH PASSWORD :'pgpass'; ALTER USER supabase_storage_admin WITH PASSWORD :'pgpass'; +ALTER USER supabase_read_only_user WITH PASSWORD :'pgpass';