Dashboard default credentials substitution in kong.yml

apps/docs/pages/guides/self-hosting/docker.mdx

@@ -112,7 +112,12 @@ You will need to [restart](#restarting-all-services) the services for the change
 
 ### Dashboard Authentication
 
-The dashboard is protected with Basic Authentication. The default user and password MUST be updated before using Supabase in production. You can update the `./docker/volumes/api/kong.yml` file with your own credentials. For example:
+The dashboard is protected with Basic Authentication. The default user and password MUST be updated before using Supabase in production.
+Update the following values in the `.env` file:
+ - `DASHBOARD_USERNAME`: The default username for the Dashboard 
+ - `DASHBOARD_PASSWORD`: The default password for the Dashboard 
+
+You can Also update the `./docker/volumes/api/kong.yml` file with your own credentials. For example:
 
 ```yaml docker/volumes/api/kong.yml
 basicauth_credentials:

docker/.env.example

@@ -7,7 +7,8 @@ POSTGRES_PASSWORD=your-super-secret-and-long-postgres-password
 JWT_SECRET=your-super-secret-jwt-token-with-at-least-32-characters-long
 ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJhbm9uIiwKICAgICJpc3MiOiAic3VwYWJhc2UtZGVtbyIsCiAgICAiaWF0IjogMTY0MTc2OTIwMCwKICAgICJleHAiOiAxNzk5NTM1NjAwCn0.dc_X5iR_VP_qT0zsiyj_I_OZ2T9FtRU2BBNWN8Bu4GE
 SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyAgCiAgICAicm9sZSI6ICJzZXJ2aWNlX3JvbGUiLAogICAgImlzcyI6ICJzdXBhYmFzZS1kZW1vIiwKICAgICJpYXQiOiAxNjQxNzY5MjAwLAogICAgImV4cCI6IDE3OTk1MzU2MDAKfQ.DaYlNEoUrrEn2Ig7tqibS-PHK5vgusbcbo7X36XVt4Q
-
+DASHBOARD_USERNAME=supabase
+DASHBOARD_PASSWORD=this_password_is_insecure_and_should_be_updated
 
 ############
 # Database - You can change these to any PostgreSQL database that has logical replication enabled.

docker/docker-compose.yml

@@ -78,6 +78,8 @@ services:
       KONG_NGINX_PROXY_PROXY_BUFFERS: 64 160k
       SUPABASE_ANON_KEY: ${ANON_KEY}
       SUPABASE_SERVICE_KEY: ${SERVICE_ROLE_KEY}
+      DASHBOARD_USERNAME: ${DASHBOARD_USERNAME}
+      DASHBOARD_PASSWORD: ${DASHBOARD_PASSWORD}
     volumes:
       # https://github.com/supabase/supabase/issues/12661
       - ./volumes/api/kong.yml:/home/kong/temp.yml:ro

docker/volumes/api/kong.yml

@@ -27,8 +27,8 @@ acls:
 ###
 basicauth_credentials:
 - consumer: DASHBOARD
-  username: supabase
-  password: this_password_is_insecure_and_should_be_updated
+  username: $DASHBOARD_USERNAME
+  password: $DASHBOARD_PASSWORD
 
 
 ###