···11+# For detailed configuration reference documentation, visit:
22+# https://supabase.com/docs/guides/local-development/cli/config
33+# A string used to distinguish different Supabase projects on the same host. Defaults to the
44+# working directory name when running `supabase init`.
55+project_id = "app"
66+77+[api]
88+enabled = true
99+# Port to use for the API URL.
1010+port = 54321
1111+# Schemas to expose in your API. Tables, views and stored procedures in this schema will get API
1212+# endpoints. `public` and `graphql_public` schemas are included by default.
1313+schemas = ["public", "graphql_public"]
1414+# Extra schemas to add to the search_path of every request.
1515+extra_search_path = ["public", "extensions"]
1616+# The maximum number of rows returns from a view, table, or stored procedure. Limits payload size
1717+# for accidental or malicious requests.
1818+max_rows = 1000
1919+2020+[api.tls]
2121+# Enable HTTPS endpoints locally using a self-signed certificate.
2222+enabled = false
2323+# Paths to self-signed certificate pair.
2424+# cert_path = "../certs/my-cert.pem"
2525+# key_path = "../certs/my-key.pem"
2626+2727+[db]
2828+# Port to use for the local database URL.
2929+port = 54322
3030+# Port used by db diff command to initialize the shadow database.
3131+shadow_port = 54320
3232+# The database major version to use. This has to be the same as your remote database's. Run `SHOW
3333+# server_version;` on the remote database to check.
3434+major_version = 17
3535+3636+[db.pooler]
3737+enabled = false
3838+# Port to use for the local connection pooler.
3939+port = 54329
4040+# Specifies when a server connection can be reused by other clients.
4141+# Configure one of the supported pooler modes: `transaction`, `session`.
4242+pool_mode = "transaction"
4343+# How many server connections to allow per user/database pair.
4444+default_pool_size = 20
4545+# Maximum number of client connections allowed.
4646+max_client_conn = 100
4747+4848+# [db.vault]
4949+# secret_key = "env(SECRET_VALUE)"
5050+5151+[db.migrations]
5252+# If disabled, migrations will be skipped during a db push or reset.
5353+enabled = true
5454+# Specifies an ordered list of schema files that describe your database.
5555+# Supports glob patterns relative to supabase directory: "./schemas/*.sql"
5656+schema_paths = []
5757+5858+[db.seed]
5959+# If enabled, seeds the database after migrations during a db reset.
6060+enabled = true
6161+# Specifies an ordered list of seed files to load during db reset.
6262+# Supports glob patterns relative to supabase directory: "./seeds/*.sql"
6363+sql_paths = ["./seed.sql"]
6464+6565+[db.network_restrictions]
6666+# Enable management of network restrictions.
6767+enabled = false
6868+# List of IPv4 CIDR blocks allowed to connect to the database.
6969+# Defaults to allow all IPv4 connections. Set empty array to block all IPs.
7070+allowed_cidrs = ["0.0.0.0/0"]
7171+# List of IPv6 CIDR blocks allowed to connect to the database.
7272+# Defaults to allow all IPv6 connections. Set empty array to block all IPs.
7373+allowed_cidrs_v6 = ["::/0"]
7474+7575+[realtime]
7676+enabled = true
7777+# Bind realtime via either IPv4 or IPv6. (default: IPv4)
7878+# ip_version = "IPv6"
7979+# The maximum length in bytes of HTTP request headers. (default: 4096)
8080+# max_header_length = 4096
8181+8282+[studio]
8383+enabled = true
8484+# Port to use for Supabase Studio.
8585+port = 54323
8686+# External URL of the API server that frontend connects to.
8787+api_url = "http://127.0.0.1"
8888+# OpenAI API Key to use for Supabase AI in the Supabase Studio.
8989+openai_api_key = "env(OPENAI_API_KEY)"
9090+9191+# Email testing server. Emails sent with the local dev setup are not actually sent - rather, they
9292+# are monitored, and you can view the emails that would have been sent from the web interface.
9393+[inbucket]
9494+enabled = true
9595+# Port to use for the email testing server web interface.
9696+port = 54324
9797+# Uncomment to expose additional ports for testing user applications that send emails.
9898+# smtp_port = 54325
9999+# pop3_port = 54326
100100+# admin_email = "admin@email.com"
101101+# sender_name = "Admin"
102102+103103+[storage]
104104+enabled = true
105105+# The maximum file size allowed (e.g. "5MB", "500KB").
106106+file_size_limit = "50MiB"
107107+108108+# Uncomment to configure local storage buckets
109109+# [storage.buckets.images]
110110+# public = false
111111+# file_size_limit = "50MiB"
112112+# allowed_mime_types = ["image/png", "image/jpeg"]
113113+# objects_path = "./images"
114114+115115+# Allow connections via S3 compatible clients
116116+[storage.s3_protocol]
117117+enabled = true
118118+119119+# Image transformation API is available to Supabase Pro plan.
120120+# [storage.image_transformation]
121121+# enabled = true
122122+123123+# Store analytical data in S3 for running ETL jobs over Iceberg Catalog
124124+# This feature is only available on the hosted platform.
125125+[storage.analytics]
126126+enabled = false
127127+max_namespaces = 5
128128+max_tables = 10
129129+max_catalogs = 2
130130+131131+# Analytics Buckets is available to Supabase Pro plan.
132132+# [storage.analytics.buckets.my-warehouse]
133133+134134+# Store vector embeddings in S3 for large and durable datasets
135135+# This feature is only available on the hosted platform.
136136+[storage.vector]
137137+enabled = false
138138+max_buckets = 10
139139+max_indexes = 5
140140+141141+# Vector Buckets is available to Supabase Pro plan.
142142+# [storage.vector.buckets.documents-openai]
143143+144144+[auth]
145145+enabled = true
146146+# The base URL of your website. Used as an allow-list for redirects and for constructing URLs used
147147+# in emails.
148148+site_url = "http://127.0.0.1:3000"
149149+# A list of *exact* URLs that auth providers are permitted to redirect to post authentication.
150150+additional_redirect_urls = ["https://127.0.0.1:3000"]
151151+# How long tokens are valid for, in seconds. Defaults to 3600 (1 hour), maximum 604,800 (1 week).
152152+jwt_expiry = 3600
153153+# JWT issuer URL. If not set, defaults to the local API URL (http://127.0.0.1:<port>/auth/v1).
154154+# jwt_issuer = ""
155155+# Path to JWT signing key. DO NOT commit your signing keys file to git.
156156+# signing_keys_path = "./signing_keys.json"
157157+# If disabled, the refresh token will never expire.
158158+enable_refresh_token_rotation = true
159159+# Allows refresh tokens to be reused after expiry, up to the specified interval in seconds.
160160+# Requires enable_refresh_token_rotation = true.
161161+refresh_token_reuse_interval = 10
162162+# Allow/disallow new user signups to your project.
163163+enable_signup = true
164164+# Allow/disallow anonymous sign-ins to your project.
165165+enable_anonymous_sign_ins = false
166166+# Allow/disallow testing manual linking of accounts
167167+enable_manual_linking = false
168168+# Passwords shorter than this value will be rejected as weak. Minimum 6, recommended 8 or more.
169169+minimum_password_length = 6
170170+# Passwords that do not meet the following requirements will be rejected as weak. Supported values
171171+# are: `letters_digits`, `lower_upper_letters_digits`, `lower_upper_letters_digits_symbols`
172172+password_requirements = ""
173173+174174+[auth.rate_limit]
175175+# Number of emails that can be sent per hour. Requires auth.email.smtp to be enabled.
176176+email_sent = 2
177177+# Number of SMS messages that can be sent per hour. Requires auth.sms to be enabled.
178178+sms_sent = 30
179179+# Number of anonymous sign-ins that can be made per hour per IP address. Requires enable_anonymous_sign_ins = true.
180180+anonymous_users = 30
181181+# Number of sessions that can be refreshed in a 5 minute interval per IP address.
182182+token_refresh = 150
183183+# Number of sign up and sign-in requests that can be made in a 5 minute interval per IP address (excludes anonymous users).
184184+sign_in_sign_ups = 30
185185+# Number of OTP / Magic link verifications that can be made in a 5 minute interval per IP address.
186186+token_verifications = 30
187187+# Number of Web3 logins that can be made in a 5 minute interval per IP address.
188188+web3 = 30
189189+190190+# Configure one of the supported captcha providers: `hcaptcha`, `turnstile`.
191191+# [auth.captcha]
192192+# enabled = true
193193+# provider = "hcaptcha"
194194+# secret = ""
195195+196196+[auth.email]
197197+# Allow/disallow new user signups via email to your project.
198198+enable_signup = true
199199+# If enabled, a user will be required to confirm any email change on both the old, and new email
200200+# addresses. If disabled, only the new email is required to confirm.
201201+double_confirm_changes = true
202202+# If enabled, users need to confirm their email address before signing in.
203203+enable_confirmations = false
204204+# If enabled, users will need to reauthenticate or have logged in recently to change their password.
205205+secure_password_change = false
206206+# Controls the minimum amount of time that must pass before sending another signup confirmation or password reset email.
207207+max_frequency = "1s"
208208+# Number of characters used in the email OTP.
209209+otp_length = 6
210210+# Number of seconds before the email OTP expires (defaults to 1 hour).
211211+otp_expiry = 3600
212212+213213+# Use a production-ready SMTP server
214214+# [auth.email.smtp]
215215+# enabled = true
216216+# host = "smtp.sendgrid.net"
217217+# port = 587
218218+# user = "apikey"
219219+# pass = "env(SENDGRID_API_KEY)"
220220+# admin_email = "admin@email.com"
221221+# sender_name = "Admin"
222222+223223+# Uncomment to customize email template
224224+# [auth.email.template.invite]
225225+# subject = "You have been invited"
226226+# content_path = "./supabase/templates/invite.html"
227227+228228+# Uncomment to customize notification email template
229229+# [auth.email.notification.password_changed]
230230+# enabled = true
231231+# subject = "Your password has been changed"
232232+# content_path = "./templates/password_changed_notification.html"
233233+234234+[auth.sms]
235235+# Allow/disallow new user signups via SMS to your project.
236236+enable_signup = false
237237+# If enabled, users need to confirm their phone number before signing in.
238238+enable_confirmations = false
239239+# Template for sending OTP to users
240240+template = "Your code is {{ .Code }}"
241241+# Controls the minimum amount of time that must pass before sending another sms otp.
242242+max_frequency = "5s"
243243+244244+# Use pre-defined map of phone number to OTP for testing.
245245+# [auth.sms.test_otp]
246246+# 4152127777 = "123456"
247247+248248+# Configure logged in session timeouts.
249249+# [auth.sessions]
250250+# Force log out after the specified duration.
251251+# timebox = "24h"
252252+# Force log out if the user has been inactive longer than the specified duration.
253253+# inactivity_timeout = "8h"
254254+255255+# This hook runs before a new user is created and allows developers to reject the request based on the incoming user object.
256256+# [auth.hook.before_user_created]
257257+# enabled = true
258258+# uri = "pg-functions://postgres/auth/before-user-created-hook"
259259+260260+# This hook runs before a token is issued and allows you to add additional claims based on the authentication method used.
261261+# [auth.hook.custom_access_token]
262262+# enabled = true
263263+# uri = "pg-functions://<database>/<schema>/<hook_name>"
264264+265265+# Configure one of the supported SMS providers: `twilio`, `twilio_verify`, `messagebird`, `textlocal`, `vonage`.
266266+[auth.sms.twilio]
267267+enabled = false
268268+account_sid = ""
269269+message_service_sid = ""
270270+# DO NOT commit your Twilio auth token to git. Use environment variable substitution instead:
271271+auth_token = "env(SUPABASE_AUTH_SMS_TWILIO_AUTH_TOKEN)"
272272+273273+# Multi-factor-authentication is available to Supabase Pro plan.
274274+[auth.mfa]
275275+# Control how many MFA factors can be enrolled at once per user.
276276+max_enrolled_factors = 10
277277+278278+# Control MFA via App Authenticator (TOTP)
279279+[auth.mfa.totp]
280280+enroll_enabled = false
281281+verify_enabled = false
282282+283283+# Configure MFA via Phone Messaging
284284+[auth.mfa.phone]
285285+enroll_enabled = false
286286+verify_enabled = false
287287+otp_length = 6
288288+template = "Your code is {{ .Code }}"
289289+max_frequency = "5s"
290290+291291+# Configure MFA via WebAuthn
292292+# [auth.mfa.web_authn]
293293+# enroll_enabled = true
294294+# verify_enabled = true
295295+296296+# Use an external OAuth provider. The full list of providers are: `apple`, `azure`, `bitbucket`,
297297+# `discord`, `facebook`, `github`, `gitlab`, `google`, `keycloak`, `linkedin_oidc`, `notion`, `twitch`,
298298+# `twitter`, `slack`, `spotify`, `workos`, `zoom`.
299299+[auth.external.apple]
300300+enabled = false
301301+client_id = ""
302302+# DO NOT commit your OAuth provider secret to git. Use environment variable substitution instead:
303303+secret = "env(SUPABASE_AUTH_EXTERNAL_APPLE_SECRET)"
304304+# Overrides the default auth redirectUrl.
305305+redirect_uri = ""
306306+# Overrides the default auth provider URL. Used to support self-hosted gitlab, single-tenant Azure,
307307+# or any other third-party OIDC providers.
308308+url = ""
309309+# If enabled, the nonce check will be skipped. Required for local sign in with Google auth.
310310+skip_nonce_check = false
311311+# If enabled, it will allow the user to successfully authenticate when the provider does not return an email address.
312312+email_optional = false
313313+314314+# Allow Solana wallet holders to sign in to your project via the Sign in with Solana (SIWS, EIP-4361) standard.
315315+# You can configure "web3" rate limit in the [auth.rate_limit] section and set up [auth.captcha] if self-hosting.
316316+[auth.web3.solana]
317317+enabled = false
318318+319319+# Use Firebase Auth as a third-party provider alongside Supabase Auth.
320320+[auth.third_party.firebase]
321321+enabled = false
322322+# project_id = "my-firebase-project"
323323+324324+# Use Auth0 as a third-party provider alongside Supabase Auth.
325325+[auth.third_party.auth0]
326326+enabled = false
327327+# tenant = "my-auth0-tenant"
328328+# tenant_region = "us"
329329+330330+# Use AWS Cognito (Amplify) as a third-party provider alongside Supabase Auth.
331331+[auth.third_party.aws_cognito]
332332+enabled = false
333333+# user_pool_id = "my-user-pool-id"
334334+# user_pool_region = "us-east-1"
335335+336336+# Use Clerk as a third-party provider alongside Supabase Auth.
337337+[auth.third_party.clerk]
338338+enabled = false
339339+# Obtain from https://clerk.com/setup/supabase
340340+# domain = "example.clerk.accounts.dev"
341341+342342+# OAuth server configuration
343343+[auth.oauth_server]
344344+# Enable OAuth server functionality
345345+enabled = false
346346+# Path for OAuth consent flow UI
347347+authorization_url_path = "/oauth/consent"
348348+# Allow dynamic client registration
349349+allow_dynamic_registration = false
350350+351351+[edge_runtime]
352352+enabled = true
353353+# Supported request policies: `oneshot`, `per_worker`.
354354+# `per_worker` (default) — enables hot reload during local development.
355355+# `oneshot` — fallback mode if hot reload causes issues (e.g. in large repos or with symlinks).
356356+policy = "per_worker"
357357+# Port to attach the Chrome inspector for debugging edge functions.
358358+inspector_port = 8083
359359+# The Deno major version to use.
360360+deno_version = 2
361361+362362+# [edge_runtime.secrets]
363363+# secret_key = "env(SECRET_VALUE)"
364364+365365+[analytics]
366366+enabled = true
367367+port = 54327
368368+# Configure one of the supported backends: `postgres`, `bigquery`.
369369+backend = "postgres"
370370+371371+# Experimental features may be deprecated any time
372372+[experimental]
373373+# Configures Postgres storage engine to use OrioleDB (S3)
374374+orioledb_version = ""
375375+# Configures S3 bucket URL, eg. <bucket_name>.s3-<region>.amazonaws.com
376376+s3_host = "env(S3_HOST)"
377377+# Configures S3 bucket region, eg. us-east-1
378378+s3_region = "env(S3_REGION)"
379379+# Configures AWS_ACCESS_KEY_ID for S3 bucket
380380+s3_access_key = "env(S3_ACCESS_KEY)"
381381+# Configures AWS_SECRET_ACCESS_KEY for S3 bucket
382382+s3_secret_key = "env(S3_SECRET_KEY)"