Commit Graph

7 Commits

Author SHA1 Message Date
Matt cfbf7639c2 Add password setup script for Supabase roles
Build and Push Docker Image / build (push) Successful in 1m51s Details
The Supabase postgres image's internal migrate.sh requires supabase_admin
to have a password matching POSTGRES_PASSWORD. Added zz-set-passwords.sh
to run after init.sql and set passwords dynamically using the environment
variable.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 13:57:35 +01:00
Matt 0e93961bb9 Remove hardcoded supabase_admin password from init.sql
Build and Push Docker Image / build (push) Successful in 1m48s Details
The Supabase postgres image sets these passwords based on POSTGRES_PASSWORD.
Hardcoding 'postgres' caused the image's migrate.sh to fail.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 12:20:46 +01:00
Matt c8efc3859c Wrap storage operations in conditionals for fresh db init
Build and Push Docker Image / build (push) Successful in 1m46s Details
- storage.objects and storage.buckets are created by storage-api service
- Wrapped all storage bucket inserts and policy operations in DO blocks
- Check if table exists before running storage operations
- Prevents errors during initial database setup

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 12:14:32 +01:00
Matt ce3239598d Add auth helper functions (uid, role, jwt) to init.sql
Build and Push Docker Image / build (push) Successful in 1m45s Details
These functions are normally created by GoTrue but our init.sql
runs first. Needed for RLS policies that use auth.uid().

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 12:12:33 +01:00
Matt 679f278075 Grant service_role full access to all public tables
Build and Push Docker Image / build (push) Successful in 1m46s Details
Added GRANT ALL for service_role on:
- membership_statuses, membership_types, members tables
- All tables and sequences in public schema
- Default privileges for future tables

Fixes 'permission denied' errors during admin setup.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 12:10:21 +01:00
Matt 4039ec8187 Remove FK references to auth.users from init.sql
Build and Push Docker Image / build (push) Successful in 1m55s Details
The auth.users table is created by GoTrue, not the database init.
FK constraints to auth.users fail because init.sql runs before auth starts.
Removed FK from members and audit_logs tables.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 11:58:31 +01:00
Matt 3187f5babb Add standalone production deployment package
Build and Push Docker Image / build (push) Successful in 1m46s Details
- docker-compose.yml: Standalone compose with Traefik, Supabase, portal
- init.sql: Combined database schema + all 16 migrations
- kong.yml.template: Kong config with API key placeholders
- setup.sh: Auto-generates secrets (JWT, passwords, API keys)
- .env.example: Comprehensive environment template
- README.md: Complete deployment guide

No source code cloning required - just copy files and run setup.sh

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 11:15:56 +01:00