davide
f496eb2f88
Stack Docker completo in infra/supabase/docker/ (vendored da supabase/supabase) per svincolare dev e produzione da Lovable Cloud. Include override di produzione che non espone porte pubblicamente e disattiva i servizi non usati da CrAPP (Realtime, Storage, imgproxy, Edge Functions, pooler), un Caddyfile con routing /api/* per un solo dominio, e i template .env per app e stack. Forzo inoltre il preset Nitro a node-server in vite.config.ts, dato che il default sarebbe Cloudflare Workers.
36 lines
1.3 KiB
Bash
Executable File
36 lines
1.3 KiB
Bash
Executable File
#!/bin/sh
|
|
set -e
|
|
|
|
# Generate SHA1 base64 hash for Envoy basic auth user list
|
|
PASSWORD_HASH=$(printf '%s' "${DASHBOARD_PASSWORD}" | openssl sha1 -binary | openssl base64)
|
|
DASHBOARD_BASIC_AUTH="${DASHBOARD_USERNAME}:{SHA}${PASSWORD_HASH}"
|
|
|
|
echo "Generating Envoy configuration..."
|
|
|
|
# Process the lds.yaml template with environment variables using sed
|
|
# Using | as delimiter since JWT tokens contain /
|
|
sed -e "s|\${ANON_KEY}|${ANON_KEY}|g" \
|
|
-e "s|\${ANON_KEY_ASYMMETRIC}|${ANON_KEY_ASYMMETRIC}|g" \
|
|
-e "s|\${SERVICE_ROLE_KEY}|${SERVICE_ROLE_KEY}|g" \
|
|
-e "s|\${SERVICE_ROLE_KEY_ASYMMETRIC}|${SERVICE_ROLE_KEY_ASYMMETRIC}|g" \
|
|
-e "s|\${SUPABASE_PUBLISHABLE_KEY}|${SUPABASE_PUBLISHABLE_KEY}|g" \
|
|
-e "s|\${SUPABASE_SECRET_KEY}|${SUPABASE_SECRET_KEY}|g" \
|
|
-e "s|\${SUPABASE_PUBLIC_URL}|${SUPABASE_PUBLIC_URL}|g" \
|
|
-e "s|\${DASHBOARD_BASIC_AUTH}|${DASHBOARD_BASIC_AUTH}|g" \
|
|
/etc/envoy/lds.template.yaml > /etc/envoy/lds.yaml
|
|
|
|
if [ -n "$SUPABASE_SECRET_KEY" ] && \
|
|
[ -n "$SUPABASE_PUBLISHABLE_KEY" ] && \
|
|
[ -n "$SERVICE_ROLE_KEY_ASYMMETRIC" ] && \
|
|
[ -n "$ANON_KEY_ASYMMETRIC" ]; then
|
|
echo "Envoy sb_ key translation enabled"
|
|
else
|
|
echo "Envoy running in legacy API key mode (sb_ keys disabled)"
|
|
fi
|
|
|
|
echo "Envoy configuration generated successfully"
|
|
echo "Starting Envoy..."
|
|
|
|
# Start Envoy
|
|
exec envoy -c /etc/envoy/envoy.yaml "$@"
|