name: social-app-local services: redis: image: redis:7-alpine container_name: social-local-redis restart: unless-stopped ports: - "${SOCIAL_REDIS__PORT:-6379}:6379" volumes: - redis_data:/data environment: - REDIS_PASSWORD=${SOCIAL_REDIS__PASSWORD:-} command: > sh -c 'if [ -n "$$REDIS_PASSWORD" ]; then redis-server --appendonly yes --requirepass "$$REDIS_PASSWORD"; else redis-server --appendonly yes; fi' healthcheck: test: ["CMD", "sh", "-c", "if [ -n \"$$REDIS_PASSWORD\" ]; then redis-cli -a \"$$REDIS_PASSWORD\" ping; else redis-cli ping; fi"] interval: 5s timeout: 3s retries: 5 qdrant: image: qdrant/qdrant:latest container_name: social-local-qdrant restart: unless-stopped ports: - "${SOCIAL_QDRANT__PORT:-6333}:6333" - "${SOCIAL_QDRANT__GRPC_PORT:-6334}:6334" volumes: - qdrant_data:/qdrant/storage environment: - QDRANT__SERVICE__API_KEY=${SOCIAL_QDRANT__API_KEY:-} studio: container_name: supabase-studio image: supabase/studio:2025.12.17-sha-43f4f7f restart: unless-stopped healthcheck: test: ["CMD", "node", "-e", "fetch('http://studio:3000/api/platform/profile').then((r) => {if (r.status !== 200) throw new Error(r.status)})"] timeout: 10s interval: 5s retries: 3 depends_on: analytics: condition: service_healthy environment: HOSTNAME: "::" STUDIO_PG_META_URL: http://meta:8080 POSTGRES_PORT: 5432 POSTGRES_HOST: db POSTGRES_DB: postgres POSTGRES_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} PG_META_CRYPTO_KEY: ${SOCIAL_SUPABASE__PG_META_CRYPTO_KEY} DEFAULT_ORGANIZATION_NAME: ${SOCIAL_SUPABASE__STUDIO_DEFAULT_ORGANIZATION:-Social App} DEFAULT_PROJECT_NAME: ${SOCIAL_SUPABASE__STUDIO_DEFAULT_PROJECT:-local} OPENAI_API_KEY: ${SOCIAL_SUPABASE__OPENAI_API_KEY:-} SUPABASE_URL: http://kong:8000 SUPABASE_PUBLIC_URL: ${SOCIAL_SUPABASE__PUBLIC_SCHEME}://${SOCIAL_SUPABASE__PUBLIC_HOST}:${SOCIAL_SUPABASE__KONG_HTTP_PORT} SUPABASE_ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY} SUPABASE_SERVICE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY} AUTH_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} LOGFLARE_PUBLIC_ACCESS_TOKEN: ${SOCIAL_SUPABASE__LOGFLARE_PUBLIC_ACCESS_TOKEN} LOGFLARE_PRIVATE_ACCESS_TOKEN: ${SOCIAL_SUPABASE__LOGFLARE_PRIVATE_ACCESS_TOKEN} LOGFLARE_URL: http://analytics:4000 NEXT_PUBLIC_ENABLE_LOGS: "true" NEXT_ANALYTICS_BACKEND_PROVIDER: postgres kong: container_name: supabase-kong image: kong:2.8.1 restart: unless-stopped ports: - "127.0.0.1:${SOCIAL_SUPABASE__KONG_HTTP_PORT:-8000}:8000/tcp" - "127.0.0.1:${SOCIAL_SUPABASE__KONG_HTTPS_PORT:-8443}:8443/tcp" volumes: - ./volumes/api/kong.yml:/home/kong/temp.yml:ro,z depends_on: analytics: condition: service_healthy environment: KONG_DATABASE: "off" KONG_DECLARATIVE_CONFIG: /home/kong/kong.yml KONG_DNS_ORDER: LAST,A,CNAME KONG_PLUGINS: request-transformer,cors,key-auth,acl,basic-auth,request-termination,ip-restriction KONG_NGINX_PROXY_PROXY_BUFFER_SIZE: 160k KONG_NGINX_PROXY_PROXY_BUFFERS: 64 160k KONG_PROXY_LISTEN: 0.0.0.0:8000, 0.0.0.0:8443 ssl SUPABASE_ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY} SUPABASE_SERVICE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY} DASHBOARD_USERNAME: ${SOCIAL_SUPABASE__DASHBOARD_USERNAME} DASHBOARD_PASSWORD: ${SOCIAL_SUPABASE__DASHBOARD_PASSWORD} entrypoint: bash -c 'eval "echo \"$$(cat ~/temp.yml)\"" > ~/kong.yml && /docker-entrypoint.sh kong docker-start' auth: container_name: supabase-auth image: supabase/gotrue:v2.184.0 restart: unless-stopped healthcheck: test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://localhost:9999/health"] timeout: 5s interval: 5s retries: 3 depends_on: db: condition: service_healthy analytics: condition: service_healthy environment: GOTRUE_API_HOST: 0.0.0.0 GOTRUE_API_PORT: 9999 API_EXTERNAL_URL: ${SOCIAL_SUPABASE__PUBLIC_SCHEME}://${SOCIAL_SUPABASE__PUBLIC_HOST}:${SOCIAL_SUPABASE__KONG_HTTP_PORT} GOTRUE_DB_DRIVER: postgres GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${SOCIAL_DATABASE__PASSWORD}@db:5432/postgres GOTRUE_SITE_URL: ${SOCIAL_SUPABASE__SITE_URL} GOTRUE_URI_ALLOW_LIST: ${SOCIAL_SUPABASE__ADDITIONAL_REDIRECT_URLS:-} GOTRUE_DISABLE_SIGNUP: ${SOCIAL_SUPABASE__DISABLE_SIGNUP:-false} GOTRUE_JWT_ADMIN_ROLES: service_role GOTRUE_JWT_AUD: authenticated GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated GOTRUE_JWT_EXP: ${SOCIAL_SUPABASE__JWT_EXPIRY:-3600} GOTRUE_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} GOTRUE_EXTERNAL_EMAIL_ENABLED: ${SOCIAL_SUPABASE__ENABLE_EMAIL_SIGNUP:-true} GOTRUE_EXTERNAL_ANONYMOUS_USERS_ENABLED: ${SOCIAL_SUPABASE__ENABLE_ANONYMOUS_USERS:-false} GOTRUE_MAILER_AUTOCONFIRM: ${SOCIAL_SUPABASE__ENABLE_EMAIL_AUTOCONFIRM:-true} GOTRUE_SMTP_ADMIN_EMAIL: ${SOCIAL_SUPABASE__SMTP_ADMIN_EMAIL:-} GOTRUE_SMTP_HOST: ${SOCIAL_SUPABASE__SMTP_HOST:-} GOTRUE_SMTP_PORT: ${SOCIAL_SUPABASE__SMTP_PORT:-} GOTRUE_SMTP_USER: ${SOCIAL_SUPABASE__SMTP_USER:-} GOTRUE_SMTP_PASS: ${SOCIAL_SUPABASE__SMTP_PASS:-} GOTRUE_SMTP_SENDER_NAME: ${SOCIAL_SUPABASE__SMTP_SENDER_NAME:-} GOTRUE_MAILER_URLPATHS_INVITE: ${SOCIAL_SUPABASE__MAILER_URLPATHS_INVITE:-/auth/v1/verify} GOTRUE_MAILER_URLPATHS_CONFIRMATION: ${SOCIAL_SUPABASE__MAILER_URLPATHS_CONFIRMATION:-/auth/v1/verify} GOTRUE_MAILER_URLPATHS_RECOVERY: ${SOCIAL_SUPABASE__MAILER_URLPATHS_RECOVERY:-/auth/v1/recover} GOTRUE_MAILER_URLPATHS_EMAIL_CHANGE: ${SOCIAL_SUPABASE__MAILER_URLPATHS_EMAIL_CHANGE:-/auth/v1/verify} GOTRUE_EXTERNAL_PHONE_ENABLED: ${SOCIAL_SUPABASE__ENABLE_PHONE_SIGNUP:-false} GOTRUE_SMS_AUTOCONFIRM: ${SOCIAL_SUPABASE__ENABLE_PHONE_AUTOCONFIRM:-false} rest: container_name: supabase-rest image: postgrest/postgrest:v14.1 restart: unless-stopped depends_on: db: condition: service_healthy analytics: condition: service_healthy environment: PGRST_DB_URI: postgres://authenticator:${SOCIAL_DATABASE__PASSWORD}@db:5432/postgres PGRST_DB_SCHEMAS: ${SOCIAL_SUPABASE__PGRST_DB_SCHEMAS:-public} PGRST_DB_ANON_ROLE: anon PGRST_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} PGRST_DB_USE_LEGACY_GUCS: "false" PGRST_APP_SETTINGS_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} PGRST_APP_SETTINGS_JWT_EXP: ${SOCIAL_SUPABASE__JWT_EXPIRY:-3600} command: ["postgrest"] realtime: container_name: realtime-dev.supabase-realtime image: supabase/realtime:v2.68.0 restart: unless-stopped depends_on: db: condition: service_healthy analytics: condition: service_healthy healthcheck: test: ["CMD-SHELL", "curl -sSfL --head -o /dev/null -H \"Authorization: Bearer ${SOCIAL_SUPABASE__ANON_KEY}\" http://localhost:4000/api/tenants/realtime-dev/health"] timeout: 5s interval: 30s retries: 3 start_period: 10s environment: PORT: 4000 DB_HOST: db DB_PORT: 5432 DB_USER: supabase_admin DB_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} DB_NAME: postgres DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime' DB_ENC_KEY: supabaserealtime API_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} SECRET_KEY_BASE: ${SOCIAL_SUPABASE__SECRET_KEY_BASE} ERL_AFLAGS: -proto_dist inet_tcp DNS_NODES: "''" RLIMIT_NOFILE: "10000" APP_NAME: realtime SEED_SELF_HOST: "true" RUN_JANITOR: "true" storage: container_name: supabase-storage image: supabase/storage-api:v1.33.0 restart: unless-stopped volumes: - ./volumes/storage:/var/lib/storage:z healthcheck: test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://storage:5000/status"] timeout: 5s interval: 5s retries: 3 depends_on: db: condition: service_healthy rest: condition: service_started imgproxy: condition: service_started environment: ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY} SERVICE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY} POSTGREST_URL: http://rest:3000 PGRST_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} DATABASE_URL: postgres://supabase_storage_admin:${SOCIAL_DATABASE__PASSWORD}@db:5432/postgres REQUEST_ALLOW_X_FORWARDED_PATH: "true" FILE_SIZE_LIMIT: 52428800 STORAGE_BACKEND: file FILE_STORAGE_BACKEND_PATH: /var/lib/storage TENANT_ID: stub REGION: stub GLOBAL_S3_BUCKET: stub ENABLE_IMAGE_TRANSFORMATION: "true" IMGPROXY_URL: http://imgproxy:5001 imgproxy: container_name: supabase-imgproxy image: darthsim/imgproxy:v3.30.1 restart: unless-stopped volumes: - ./volumes/storage:/var/lib/storage:z healthcheck: test: ["CMD", "imgproxy", "health"] timeout: 5s interval: 5s retries: 3 environment: IMGPROXY_BIND: ":5001" IMGPROXY_LOCAL_FILESYSTEM_ROOT: / IMGPROXY_USE_ETAG: "true" IMGPROXY_ENABLE_WEBP_DETECTION: ${SOCIAL_SUPABASE__IMGPROXY_ENABLE_WEBP_DETECTION:-true} IMGPROXY_MAX_SRC_RESOLUTION: 16.8 meta: container_name: supabase-meta image: supabase/postgres-meta:v0.95.1 restart: unless-stopped depends_on: db: condition: service_healthy analytics: condition: service_healthy environment: PG_META_PORT: 8080 PG_META_DB_HOST: db PG_META_DB_PORT: 5432 PG_META_DB_NAME: postgres PG_META_DB_USER: supabase_admin PG_META_DB_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} CRYPTO_KEY: ${SOCIAL_SUPABASE__PG_META_CRYPTO_KEY} functions: container_name: supabase-edge-functions image: supabase/edge-runtime:v1.69.28 restart: unless-stopped volumes: - ./volumes/functions:/home/deno/functions:Z depends_on: analytics: condition: service_healthy environment: JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} SUPABASE_URL: http://kong:8000 SUPABASE_ANON_KEY: ${SOCIAL_SUPABASE__ANON_KEY} SUPABASE_SERVICE_ROLE_KEY: ${SOCIAL_SUPABASE__SERVICE_ROLE_KEY} SUPABASE_DB_URL: postgresql://postgres:${SOCIAL_DATABASE__PASSWORD}@db:5432/postgres VERIFY_JWT: "${SOCIAL_SUPABASE__FUNCTIONS_VERIFY_JWT:-false}" command: ["start", "--main-service", "/home/deno/functions/main"] analytics: container_name: supabase-analytics image: supabase/logflare:1.27.0 restart: unless-stopped ports: - "127.0.0.1:${SOCIAL_SUPABASE__ANALYTICS_PORT:-4000}:4000" healthcheck: test: ["CMD", "curl", "http://localhost:4000/health"] timeout: 5s interval: 5s retries: 10 depends_on: db: condition: service_healthy environment: LOGFLARE_NODE_HOST: 127.0.0.1 DB_USERNAME: supabase_admin DB_DATABASE: _supabase DB_HOSTNAME: db DB_PORT: 5432 DB_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} DB_SCHEMA: _analytics LOGFLARE_PUBLIC_ACCESS_TOKEN: ${SOCIAL_SUPABASE__LOGFLARE_PUBLIC_ACCESS_TOKEN} LOGFLARE_PRIVATE_ACCESS_TOKEN: ${SOCIAL_SUPABASE__LOGFLARE_PRIVATE_ACCESS_TOKEN} LOGFLARE_SINGLE_TENANT: true LOGFLARE_SUPABASE_MODE: true POSTGRES_BACKEND_URL: postgresql://supabase_admin:${SOCIAL_DATABASE__PASSWORD}@db:5432/_supabase POSTGRES_BACKEND_SCHEMA: _analytics LOGFLARE_FEATURE_FLAG_OVERRIDE: multibackend=true db: container_name: supabase-db image: supabase/postgres:15.8.1.085 restart: unless-stopped ports: - "127.0.0.1:${SOCIAL_DATABASE__PORT:-5432}:5432" volumes: - ./volumes/db/realtime.sql:/docker-entrypoint-initdb.d/migrations/99-realtime.sql:Z - ./volumes/db/webhooks.sql:/docker-entrypoint-initdb.d/init-scripts/98-webhooks.sql:Z - ./volumes/db/roles.sql:/docker-entrypoint-initdb.d/init-scripts/99-roles.sql:Z - ./volumes/db/jwt.sql:/docker-entrypoint-initdb.d/init-scripts/99-jwt.sql:Z - ./volumes/db/data:/var/lib/postgresql/data:Z - ./volumes/db/_supabase.sql:/docker-entrypoint-initdb.d/migrations/97-_supabase.sql:Z - ./volumes/db/logs.sql:/docker-entrypoint-initdb.d/migrations/99-logs.sql:Z - ./volumes/db/pooler.sql:/docker-entrypoint-initdb.d/migrations/99-pooler.sql:Z - db-config:/etc/postgresql-custom healthcheck: test: ["CMD", "pg_isready", "-U", "postgres", "-h", "localhost"] interval: 5s timeout: 5s retries: 10 depends_on: vector: condition: service_healthy environment: POSTGRES_HOST: /var/run/postgresql PGPORT: 5432 POSTGRES_PORT: 5432 PGPASSWORD: ${SOCIAL_DATABASE__PASSWORD} POSTGRES_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} PGDATABASE: postgres POSTGRES_DB: postgres JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} JWT_EXP: ${SOCIAL_SUPABASE__JWT_EXPIRY:-3600} command: ["postgres", "-c", "config_file=/etc/postgresql/postgresql.conf", "-c", "log_min_messages=fatal"] vector: container_name: supabase-vector image: timberio/vector:0.28.1-alpine restart: unless-stopped volumes: - ./volumes/logs/vector.yml:/etc/vector/vector.yml:ro,z - ${SOCIAL_SUPABASE__DOCKER_SOCKET_LOCATION:-/var/run/docker.sock}:/var/run/docker.sock:ro,z healthcheck: test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://vector:9001/health"] timeout: 5s interval: 5s retries: 3 environment: LOGFLARE_PUBLIC_ACCESS_TOKEN: ${SOCIAL_SUPABASE__LOGFLARE_PUBLIC_ACCESS_TOKEN} command: ["--config", "/etc/vector/vector.yml"] security_opt: - "label=disable" supavisor: container_name: supabase-pooler image: supabase/supavisor:2.7.4 restart: unless-stopped ports: - "127.0.0.1:5432:5432" - "127.0.0.1:${SOCIAL_SUPABASE__POOLER_PROXY_PORT_TRANSACTION:-6543}:6543" volumes: - ./volumes/pooler/pooler.exs:/etc/pooler/pooler.exs:ro,z healthcheck: test: ["CMD", "curl", "-sSfL", "--head", "-o", "/dev/null", "http://127.0.0.1:4000/api/health"] interval: 10s timeout: 5s retries: 5 depends_on: db: condition: service_healthy analytics: condition: service_healthy environment: PORT: 4000 POSTGRES_PORT: 5432 POSTGRES_DB: postgres POSTGRES_PASSWORD: ${SOCIAL_DATABASE__PASSWORD} DATABASE_URL: ecto://supabase_admin:${SOCIAL_DATABASE__PASSWORD}@db:5432/_supabase CLUSTER_POSTGRES: true SECRET_KEY_BASE: ${SOCIAL_SUPABASE__SECRET_KEY_BASE} VAULT_ENC_KEY: ${SOCIAL_SUPABASE__VAULT_ENC_KEY} API_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} METRICS_JWT_SECRET: ${SOCIAL_SUPABASE__JWT_SECRET} REGION: local ERL_AFLAGS: -proto_dist inet_tcp POOLER_TENANT_ID: ${SOCIAL_SUPABASE__POOLER_TENANT_ID:-local} POOLER_DEFAULT_POOL_SIZE: ${SOCIAL_SUPABASE__POOLER_DEFAULT_POOL_SIZE:-20} POOLER_MAX_CLIENT_CONN: ${SOCIAL_SUPABASE__POOLER_MAX_CLIENT_CONN:-100} POOLER_POOL_MODE: transaction DB_POOL_SIZE: ${SOCIAL_SUPABASE__POOLER_DB_POOL_SIZE:-5} command: ["/bin/sh", "-c", "/app/bin/migrate && /app/bin/supavisor eval \"$$(cat /etc/pooler/pooler.exs)\" && /app/bin/server"] volumes: redis_data: qdrant_data: db-config: