sort files and add traefik compose file

.gitignore

@@ -103,4 +103,5 @@ typings/
 .vercel
 
 #include template .env file for docker-compose
-!docker/.env
+!docker/supabase/.env
+!docker/supabase-traefik/.env

docker/supabase-traefik/.env

@@ -0,0 +1,27 @@
+#fill with fresh random passwords
+OPERATOR_TOKEN=
+
+#at least 32 characters long
+JWT_SECRET=
+
+#string length 100 didnt work as password for me; length 50 did it
+POSTGRES_PASSWORD=
+
+# some smtp server to send your auth-mails with
+SMTP_HOST=mail.example.com
+SMTP_PORT=
+SMTP_USER=
+SMTP_PASS=
+
+TRAEFIK_SECURE_ENTRYPOINT=websecure
+TRAEFIK_NETWORK=your_docker_network
+SUPABASE_HOSTNAME=supabase.example.com
+
+
+#predefined
+POSTGRES_PORT=5432
+AUTH_PORT=9999
+REST_PORT=3000
+REALTIME_PORT=4000
+KONG_PORT=8000
+KONG_PORT_TLS=8443

docker/supabase-traefik/README.md

@@ -0,0 +1,30 @@
+# use supabase with existing traefik setup
+
+## fill the .env file and reach the endpoints at
+
+### **auth**
+
+```
+supabase.example.com/auth/
+```
+you can test auth with 
+
+```
+supabase.example.com/auth/settings 
+```
+as the default path returns 404
+
+### **realtime**
+```
+supabase.example.com/realtime/
+```
+
+### **rest**
+```
+supabase.example.com/rest/
+```
+
+### **kong**
+```
+supabase.example.com/kong/
+```

docker/supabase-traefik/docker-compose.yml

@@ -0,0 +1,138 @@
+version: '3.6'
+services:
+  kong:
+    container_name: supabase-kong
+    build:
+      context: ../dockerfiles/kong
+    environment:
+      KONG_DECLARATIVE_CONFIG: /var/lib/kong/kong.yml
+      KONG_PLUGINS: request-transformer,cors,key-auth,http-log
+    labels:
+      traefik.enable: 'true'
+      traefik.http.routers.supabase-kong.entrypoints: ${TRAEFIK_SECURE_ENTRYPOINT}
+      traefik.http.routers.supabase-kong.tls: 'true'
+      traefik.http.services.supabase-kong.loadbalancer.server.port: ${KONG_PORT}
+      traefik.docker.network: ${TRAEFIK_NETWORK}
+      traefik.http.routers.supabase-kong.rule: 'Host(`${SUPABASE_HOSTNAME}`) && PathPrefix(`/kong/`)'
+      traefik.http.routers.supabase-kong.middlewares: repl-supabase-kong@docker
+      traefik.http.middlewares.repl-supabase-kong.replacepathregex.regex: ^/kong/(.*)
+      traefik.http.middlewares.repl-supabase-kong.replacepathregex.replacement: /$$1
+    networks:
+      - rp
+      - db
+  auth:
+    container_name: supabase-auth
+    image: supabase/gotrue:latest
+    depends_on:
+      - db
+    ports:
+      - ${AUTH_PORT}
+    environment:
+      GOTRUE_JWT_SECRET: ${JWT_SECRET}
+      GOTRUE_JWT_EXP: 3600
+      GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
+      GOTRUE_DB_DRIVER: postgres
+      DB_NAMESPACE: auth
+      API_EXTERNAL_URL: ${SUPABASE_HOSTNAME}
+      GOTRUE_API_HOST: 0.0.0.0
+      PORT: ${AUTH_PORT}
+
+      GOTRUE_DISABLE_SIGNUP: 'false'
+      GOTRUE_SITE_URL: ${SUPABASE_HOSTNAME}
+      GOTRUE_MAILER_AUTOCONFIRM: 'true'
+      GOTRUE_LOG_LEVEL: DEBUG
+      GOTRUE_OPERATOR_TOKEN: ${OPERATOR_TOKEN}
+      DATABASE_URL: 'postgres://postgres:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/postgres?sslmode=disable'
+
+      GOTRUE_SMTP_HOST: ${SMTP_HOST}
+      GOTRUE_SMTP_PORT: ${SMTP_PORT}
+      GOTRUE_SMTP_USER: ${SMTP_USER}
+      GOTRUE_SMTP_PASS: ${SMTP_PASS}
+    labels:
+      traefik.enable: 'true'
+      traefik.http.routers.supabase-auth.entrypoints: ${TRAEFIK_SECURE_ENTRYPOINT}
+      traefik.http.services.supabase-auth.loadbalancer.server.port: ${AUTH_PORT}
+      traefik.http.routers.supabase-auth.tls: 'true'
+      traefik.docker.network: ${TRAEFIK_NETWORK}
+      traefik.http.routers.supabase-auth.rule: 'Host(`${SUPABASE_HOSTNAME}`) && PathPrefix(`/auth/`)'
+      traefik.http.routers.supabase-auth.middlewares: repl-supabase-auth@docker
+      traefik.http.middlewares.repl-supabase-auth.replacepathregex.regex: ^/auth/(.*)
+      traefik.http.middlewares.repl-supabase-auth.replacepathregex.replacement: /$$1
+    networks:
+      - rp
+      - db
+  rest:
+    container_name: supabase-rest
+    image: postgrest/postgrest:latest
+    depends_on:
+      - db
+    restart: always
+    environment:
+      PGRST_DB_URI: postgres://postgres:${POSTGRES_PASSWORD}@db:${POSTGRES_PORT}/postgres
+      PGRST_DB_SCHEMA: public
+      PGRST_DB_ANON_ROLE: postgres
+      PGRST_JWT_SECRET: ${JWT_SECRET}
+    labels:
+      traefik.enable: 'true'
+      traefik.http.routers.supabase-rest.entrypoints: ${TRAEFIK_SECURE_ENTRYPOINT}
+      traefik.http.services.supabase-rest.loadbalancer.server.port: ${REST_PORT}
+      traefik.http.routers.supabase-rest.tls: 'true'
+      traefik.docker.network: ${TRAEFIK_NETWORK}
+      traefik.http.routers.supabase-rest.rule: 'Host(`${SUPABASE_HOSTNAME}`) && PathPrefix(`/rest/`)'
+      traefik.http.routers.supabase-rest.middlewares: repl-supabase-rest@docker
+      traefik.http.middlewares.repl-supabase-rest.replacepathregex.regex: ^/rest/(.*)
+      traefik.http.middlewares.repl-supabase-rest.replacepathregex.replacement: /$$1
+    networks:
+      - rp
+      - db
+  realtime:
+    container_name: supabase-realtime
+    image: supabase/realtime:latest
+    depends_on:
+      - db
+    restart: on-failure
+    environment:
+      DB_HOST: db
+      DB_NAME: postgres
+      DB_USER: postgres
+      DB_PASSWORD: ${POSTGRES_PASSWORD}
+      DB_PORT: ${POSTGRES_PORT}
+      PORT: ${REALTIME_PORT}
+      HOSTNAME: localhost
+      # Disable JWT Auth locally. The JWT_SECRET will be ignored.
+      SECURE_CHANNELS: 'false'
+      JWT_SECRET: ${JWT_SECRET}
+    labels:
+      traefik.enable: 'true'
+      traefik.http.routers.supabase-realtime.entrypoints: ${TRAEFIK_SECURE_ENTRYPOINT}
+      traefik.http.services.supabase-realtime.loadbalancer.server.port: ${REALTIME_PORT}
+      traefik.http.routers.supabase-realtime.tls: 'true'
+      traefik.docker.network: ${TRAEFIK_NETWORK}
+      traefik.http.routers.supabase-realtime.rule: 'Host(`${SUPABASE_HOSTNAME}`) && PathPrefix(`/realtime/`)'
+      traefik.http.routers.supabase-realtime.middlewares: repl-supabase-realtime@docker
+      traefik.http.middlewares.repl-supabase-realtime.replacepathregex.regex: ^/realtime/(.*)
+      traefik.http.middlewares.repl-supabase-realtime.replacepathregex.replacement: /$$1
+    networks:
+      - rp
+      - db
+  db:
+    container_name: supabase-db
+    build:
+      context: ../dockerfiles/postgres
+    ports:
+      - ${POSTGRES_PORT}
+    command:
+      - postgres
+      - -c
+      - wal_level=logical
+    environment:
+      POSTGRES_DB: postgres
+      POSTGRES_USER: postgres
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_PORT: ${POSTGRES_PORT}
+    networks:
+      - db
+networks:
+  rp:
+    name: ${TRAEFIK_NETWORK}
+  db:

docker/supabase/docker-compose.yml

@@ -3,7 +3,7 @@ services:
   kong:
     container_name: supabase-kong
     build:
-      context: ./kong
+      context: ../dockerfiles/kong
     environment:
       KONG_DECLARATIVE_CONFIG: /var/lib/kong/kong.yml
       KONG_PLUGINS: request-transformer,cors,key-auth,http-log
@@ -74,7 +74,7 @@ services:
   db:
     container_name: supabase-db
     build:
-      context: ./postgres
+      context: ../dockerfiles/postgres
     ports:
       - ${POSTGRES_PORT}:${POSTGRES_PORT}
     command: