October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

How to Self-Host Supabase With Coolify

A practical guide to running Supabase’s official Docker Compose stack through Coolify, including server sizing, environment variables, domains, persistence, backups, updates and recovery.
Length12 min Posted Quest giverVGSources Team
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

You can self-host Supabase on a Linux VPS through Coolify by running Supabase’s official Docker Compose stack as a user-defined Compose service. Coolify supplies the server orchestration, environment-variable management, persistent-volume wiring, domain routing and deployment interface; Supabase still runs as a group of containers that you must secure, back up, update and monitor.

A usable production deployment depends on three details: enough CPU, memory and disk; persistent volumes for PostgreSQL and Storage; and correct public URL, authentication and secret variables. The procedure below takes you from an empty Coolify server to a reachable HTTPS endpoint, then covers backups, updates and the failure cases most likely to break a game backend.

As an Amazon Associate I earn from qualifying purchases.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What you are actually deploying

Coolify is not a replacement for Supabase and it does not turn Supabase into one container. It is the orchestration and proxy layer around Supabase’s multi-container Docker Compose application. The Compose definition starts PostgreSQL and the services that sit around it, such as the API gateway, Auth, Realtime, Storage, Studio, imgproxy and Edge Runtime. Coolify parses that definition into deployable service components, connects them to Docker networks, injects variables and can route a public domain to the API gateway.

Supabase describes Docker as the fastest and recommended way to self-host. In this arrangement, you remain responsible for the operating system, Docker host, firewall, TLS, credentials, upgrades, monitoring and recovery. Coolify makes those jobs easier to perform; it does not assume them for you.

#1 Best Overall
Sale
Gaoye Blue Light Blocking Glasses
  • BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
  • EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
  • COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
  • LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
  • WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.

What a client reaches

The default Supabase API gateway listens on port 8000 inside the deployment. In production, a reverse proxy should terminate TLS on port 443 and forward requests to that gateway. Dashboard, API and Storage links are built from SUPABASE_PUBLIC_URL. Auth uses API_EXTERNAL_URL when it constructs callback URLs, while SITE_URL is the default redirect destination after authentication. These values must be the hostnames that players, your game client and OAuth providers can actually reach, not an internal Docker name or localhost address.

Hardware and software requirements

Supabase’s 2026 Docker guidance lists the following baseline for running all components:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Workload RAM CPU Disk Qualification
Minimum for all components 4 GB 2 CPU cores 40 GB SSD Supabase’s stated 2026 minimum; leaves little headroom for traffic, logs or large databases.
Recommended for larger workloads 8 GB or more 4 CPU cores 80 GB or more SSD Supabase’s stated 2026 recommendation; actual capacity depends on players, queries, file volume and retention.

You also need a Linux server with Docker available, Git, Docker Compose familiarity, basic server administration and networking knowledge. Allocate additional disk for PostgreSQL growth, Storage files, database dumps and container logs; the figures above are not a promise of a particular player count.

Reducing the footprint

If your game does not need every feature, the Compose definition allows components such as Realtime, Storage, imgproxy or Edge Runtime to be removed. Omitting a component can reduce resource requirements, but it also removes that capability from the instance. Decide this before deployment so your schema, client libraries and operational checks match the services you actually run.

Prepare the server and domain

  1. Provision or select a Coolify server. Add a Linux host in Coolify and verify that Docker is installed and reachable. Give the host a static public address or another stable endpoint so DNS and TLS do not change unexpectedly.
  2. Plan DNS. Choose the public hostname for Supabase, such as api.example-game.com, and create the DNS record that points to the server. If Studio will be exposed separately, choose its hostname and protect it with the same HTTPS and access controls.
  3. Open only required network paths. Permit SSH for administration and HTTPS for clients. Do not expose PostgreSQL, internal service ports or the Docker socket to the public internet. The reverse proxy should be the internet-facing entry point.
  4. Prepare an off-host backup destination. Database dumps and Storage files must survive loss of the VPS. Arrange another server, object-storage target or equivalent destination before players create data, and document who can retrieve it.

Deploy the official Compose stack in Coolify

Use the current Supabase Docker Compose definition rather than an old copy. Supabase’s maintained Coolify template, when available in your installation, is another way to start, but inspect the generated definition before deploying it. Names, variables and service relationships can change between Supabase releases.

1. Create a Docker Compose service

In Coolify, select the prepared server and create a Docker Compose service. Paste or import the current Supabase Compose file. Coolify will parse the YAML and display cards or entries for each component, its networks, ports, volumes and variables. Do not deploy immediately: the parsed view is where you catch an accidental public port, missing volume or unexpected service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Windex Gaming Cleaning Wipes, Pre-Moistened Wipes to Instantly Clean all Gaming Gear and Electronics, Resealable Packaging for a Freshness Lock, 25 count (Pack of 1)
  • WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
  • AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
  • PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
  • ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
  • COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed

2. Check service names, networks and ports

Confirm that the API gateway can reach Auth, REST, Realtime and Storage over the Compose network. Keep internal ports private. The gateway’s default listener is 8000; the public reverse proxy should map your HTTPS hostname to that service rather than publishing every container directly.

3. Add persistent PostgreSQL storage

Map the PostgreSQL data directory to a durable Coolify volume or host path. A container replacement must not create an empty database. Verify the volume is attached to the database service shown in the parsed Compose definition and that the Docker user can read and write it.

4. Add persistent Storage files

Self-hosted Supabase Storage writes files to the server filesystem through a bind mount by default. Map that Storage directory to its own durable volume or host path. Backing up only PostgreSQL is insufficient: object metadata may be in the database while the actual files are in this filesystem mount.

5. Define required variables and secrets

Set the values the Compose file marks as required. Coolify supports Compose interpolation such as ${NAME:?}; a missing value causes validation or deployment to stop instead of silently starting with an empty setting. Keep secrets in Coolify’s environment-variable controls, not in a public repository or a client build.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Database: choose a strong POSTGRES_PASSWORD and keep it unavailable to game clients.
  • Dashboard: set the Studio HTTP basic-auth credentials and use a long, unique dashboard password before startup.
  • API security: provide the JWT secret and generated API keys required by the Compose definition. Treat service-role credentials as server-only secrets.
  • Public URLs: configure SUPABASE_PUBLIC_URL, API_EXTERNAL_URL and SITE_URL with the final HTTPS hostname and redirect policy.
  • Email and identity: add SMTP settings and OAuth provider settings only when those features are enabled. Ensure provider callback URLs exactly match the public URL.

Coolify can generate service URLs, FQDNs, passwords and Supabase JWT-related values through SERVICE_ variables. Review every generated value and its scope; automatic generation does not remove the need to store and rotate secrets safely.

6. Attach domains and HTTPS

Use Coolify’s domain settings to attach the public hostname to the API gateway. Put HTTPS and reverse-proxy routing in front of the gateway for production. After DNS resolves, request or enable the certificate in Coolify and test the complete chain from an external network. A certificate on an internal container does not help a client if the public proxy still serves plain HTTP.

Rank #3
Sale
LISEN Cell Phone Stand Phone Holder for Desk, Office Decor Gadgets for Men
  • Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
  • Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
  • Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
  • ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
  • Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)

7. Validate before saving

Run Coolify’s Compose validation and inspect the deployable definition. Look for unresolved variables, duplicate ports, missing volume paths, incorrect service dependencies and a hostname that still points to localhost. Save only after the parsed services and storage mappings match your plan.

8. Deploy and inspect output

Deploy from Coolify and watch the deployment output and container logs. First-start migrations and image downloads can take longer than a restart. Confirm that PostgreSQL becomes healthy before judging dependent services, then check the gateway, Auth, Storage and Studio logs individually.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

9. Recreate containers after configuration changes

Changing an environment variable or secret in Coolify does not alter values already loaded by a running process. Recreate the affected containers, or redeploy the service, so the new values are applied. Record which containers were recreated and test login, database access and file operations after the change.

Configure URLs for game clients and Auth

SUPABASE_PUBLIC_URL

This is the base URL used by Dashboard, API and Storage. Use the canonical HTTPS hostname players will call. If you later move from a temporary address to a game domain, update this variable and verify every generated link, signed URL and client configuration.

API_EXTERNAL_URL

Auth uses this value when constructing callback URLs. OAuth providers perform exact URL matching, so a missing path, wrong scheme, alternate subdomain or trailing-slash difference can produce a callback error even when the API itself responds correctly.

SITE_URL

This is the default Auth redirect. Set it to the page or application endpoint that should receive a user after sign-in. Add any additional allowed redirect URLs required by your game’s web launcher or account-management flow, and keep the list narrow.

Rank #4
Ledagic IC+RGBW USB Powered Led Light Bar with App & Remote Control, 2 Pack
  • Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
  • Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
  • 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
  • Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
  • USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC

Studio access

Studio uses HTTP basic authentication. Set a secure dashboard password before startup and avoid exposing Studio to the whole internet when a private network, VPN or IP restriction is available. Studio on a self-hosted instance represents one project; it does not provide the multi-organization or multi-project model available in a managed control plane.

Persistence, backups and recovery

Why volumes are non-negotiable

Containers are replaceable. PostgreSQL data and Storage files are not. Without persistent mappings, recreating a container can return an empty database or delete uploaded assets. Test persistence by creating a harmless test row and file, redeploying the relevant container, and confirming both still exist.

Database dumps in Coolify

Coolify documents scheduled, engine-specific database dump jobs from its database Backups page. Configure a schedule, retention appropriate to your game and a destination that is not the same disk as the live database. A backup job that writes to the failed VPS does not provide disaster recovery.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Storage-file backups

Copy the Storage bind mount independently. Database dumps preserve rows and metadata, but they do not contain the binary files stored on the server filesystem. Use versioned or immutable off-host copies when possible, and periodically verify that a sample file can be restored with its expected path and permissions.

What Supabase’s update helper does not do

Supabase’s update.sh script backs up configuration files into a backups/ directory. Supabase states that it does not back up PostgreSQL data or Storage data. Run your own database and filesystem backups before every upgrade and keep a written restore procedure that another operator can follow.

Practice a restore

  1. Provision a clean test host with the same Compose version and persistent paths.
  2. Restore a database dump and the matching Storage-file snapshot.
  3. Restore the configuration and secrets from your secure record, not from a client application.
  4. Start the stack, run migrations required by the target version and verify authentication, a representative game query and file download.
  5. Record elapsed time, missing steps and any manual fixes; this becomes your recovery runbook.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Operating and updating the deployment

Change control

Keep the Compose file, variable names, image versions and volume mappings under change control. Before changing versions, read the release notes for migration requirements, take fresh off-host backups and capture the current working definition. Avoid changing the database image, mount paths and application images in one untested step.

Best Value
Sale
HUANUO FlowLift™ Dual Monitor Stand, Fully Adjustable Gaming Monitor Desk Mount for 13–32″ Computer Screens, Full Motion VESA 75x75/100x100 with C-Clamp & Grommet Base, Each Arm Holds 4.4 to 19.8 lbs
  • Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
  • Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
  • Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
  • Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
  • Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.

Observability

Monitor disk usage, memory, CPU, database health, container restarts, certificate expiry and backup-job success. A game can appear online while Storage is filling the disk or Auth is failing callbacks. Alert on trends, not only total outages, so you can expand the VPS before PostgreSQL or Docker runs out of space.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Secret rotation

Rotate dashboard credentials and other secrets through Coolify’s environment controls. Plan the order of rotation for JWT-related values because existing tokens may become invalid. After editing a secret, recreate the relevant containers and test both server-side requests and player sign-in.

Troubleshoot the common failure modes

Compose validation fails immediately

  • Read the first unresolved interpolation in Coolify’s validation output.
  • Supply every variable marked with ${NAME:?}; an empty string is not a valid secret.
  • Check YAML indentation, duplicate keys and paths copied from an older Compose release.

Containers start, but the domain returns an error

  • Confirm DNS points to the current server address.
  • Verify the Coolify domain is attached to the gateway service, not PostgreSQL or Studio.
  • Check that the proxy forwards HTTPS traffic to port 8000 and that the gateway container is healthy.
  • Inspect proxy and gateway logs separately; a healthy database does not prove the public route is correct.

OAuth returns a callback or redirect error

  • Compare the provider’s registered callback character-for-character with the URL generated from API_EXTERNAL_URL.
  • Check that SITE_URL uses the same scheme and canonical hostname as the game’s redirect target.
  • Recreate Auth after changing these variables, then retry with a fresh browser session.

Data disappeared after redeployment

  • Inspect the running container’s mounts and confirm PostgreSQL and Storage point to the intended persistent paths.
  • Check whether a new volume was created because of a spelling or project-name change.
  • Stop writes, preserve the current disk, and follow the restore runbook rather than repeatedly redeploying.

The host becomes slow or runs out of space

  • Check PostgreSQL growth, Storage files, Docker images, logs and backup retention separately.
  • Increase resources toward the 8 GB RAM, 4-core and 80 GB SSD recommendation for larger workloads, or remove unused components.
  • Do not delete unknown volumes or database files to make space; confirm a backup and the owning service first.

New secrets appear ignored

Running containers retain their original environment. Recreate or redeploy the affected service, then inspect its logs and perform an authenticated request that exercises the changed setting.

Self-hosted Coolify versus managed Supabase

The right choice depends less on whether Docker can run and more on who will operate the production system. Use this comparison before committing a game backend to a self-hosted server.

Decision axis Coolify self-hosting Managed Supabase
Operational ownership You handle OS patches, Compose updates, secrets, firewall rules, TLS, monitoring and recovery. The provider operates the platform layer; you still configure the project, policies and application.
Data control and isolation Runs in infrastructure you select, which can support control or compliance isolation requirements. Uses the provider’s shared or dedicated service model and regional controls.
Recurring infrastructure cost You pay for the VPS, storage, bandwidth, backups and your maintenance time; exact totals depend on workload and host. You pay the provider’s plan and any usage charges instead of managing a server.
Backups You must schedule database dumps, copy Storage files off-host and test restores. Backup features and retention are supplied according to the selected managed plan; verify the plan’s recovery guarantees.
Scaling You resize or distribute services, watch capacity and design the migration. The platform supplies scaling options, subject to plan limits and provider behavior.
Feature scope A self-hosted Studio instance is a single project and does not support multiple organizations or projects. Managed control planes can offer organization and project management not present in the self-hosted Studio.

Self-hosting is a good fit when data control, compliance isolation or a physically isolated environment outweighs the work of running infrastructure. It is a poor fit when your team cannot provide reliable backups, upgrades, incident response and capacity planning.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Production readiness checklist

  • Linux host meets the 4 GB/2-core/40 GB minimum, with an appropriate growth plan toward 8 GB+/4 cores/80 GB+ for larger workloads.
  • Current Supabase Compose definition is parsed and validated in Coolify.
  • PostgreSQL and Storage use persistent, tested mounts.
  • SUPABASE_PUBLIC_URL, API_EXTERNAL_URL and SITE_URL resolve to the intended HTTPS host.
  • Gateway is the only public application route; internal database and service ports are private.
  • Studio has a strong basic-auth password and restricted exposure.
  • Database dumps and Storage files are copied off-host on a schedule.
  • A restore has been rehearsed on a clean host.
  • Secrets are stored in Coolify controls, and affected containers are recreated after changes.
  • Monitoring covers disk, memory, CPU, restarts, certificates and backup success.

Final decision

Deploy Supabase in Coolify when you want a self-managed, isolated backend and are prepared to operate a Docker stack. The reliable path is to use the current official Compose definition, persist both PostgreSQL and Storage, configure the three public URL variables before exposing Auth, terminate HTTPS at the proxy and maintain independent backups. Coolify reduces deployment friction; it does not transfer responsibility for security, upgrades, scaling or recovery away from you.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How to Set Up a RedM (RDR2) Server in 2026: License Key, txAdmin and server.cfg, Step by StepBlog11min
  2. Best RedM (RDR2) Server Hosting in 2026: Comparing Four Hosts on Slots, Memory and PriceBlog10min
  3. How to Host a Mindustry Server in 2026: server-release.jar, Port 6567 and the Commands That MatterBlog7min
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.