feat: enable MCP server for self-hosted Supabase

infra/docker/supabase/docker-compose.yml

@@ -207,7 +207,7 @@ services:
       KONG_DECLARATIVE_CONFIG: /usr/local/kong/kong.yml
       KONG_DNS_ORDER: LAST,A,CNAME
       KONG_DNS_NOT_FOUND_TTL: 1
-      KONG_PLUGINS: request-transformer,cors,key-auth,acl,post-function,basic-auth
+      KONG_PLUGINS: request-transformer,cors,key-auth,acl,post-function,basic-auth,ip-restriction
       SUPABASE_ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY}
       SUPABASE_SERVICE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY}
       SUPABASE_PUBLISHABLE_KEY: ""

infra/docker/supabase/volumes/api/kong.yml

@@ -168,4 +168,5 @@ services:
           allow:
             - 127.0.0.1
             - ::1
+            - 172.18.0.1
           deny: []

infra/docker/supabase/volumes/db/roles.sql

@@ -6,3 +6,4 @@ ALTER USER pgbouncer WITH PASSWORD :'pgpass';
 ALTER USER supabase_auth_admin WITH PASSWORD :'pgpass';
 ALTER USER supabase_functions_admin WITH PASSWORD :'pgpass';
 ALTER USER supabase_storage_admin WITH PASSWORD :'pgpass';
+ALTER USER supabase_read_only_user WITH PASSWORD :'pgpass';