“Supabase exposes your tables over PostgREST with the anon/authenticated keys that ship in the browser. If RLS is off, or a policy is \`USING (true)\`, or you only put policies on the parent table and forget child tables, anyone who can open the published URL can often read/write more than your UI shows.”
“Aws is not the only vps provider, there are extremely cheaper alternatives such as hertzner, ovh ecc. which are less expansive than the supabase official plans”
“I was facing some issues with supabase hard limits edge functions like cpu time or concurrency limits on supabase db, which im guessing can be configured if its self-hosted?”
“the RLS part is the half people actually get wrong, worth adding that the service_role key skips every policy you write. lovable will happily drop it into something that ends up in the browser bundle if you let it.”
“I’m considering moving an existing production app from managed Supabase to self-hosted Supabase on AWS EC2 because the project is starting to outgrow the Free plan limits.”
“For your current architecture, Next.js + Supabase/PostgreSQL can be perfectly reasonable if Supabase is handling things like authentication and controlled access to the data.”
“i'd keep n8n strictly in its lane, automation and orchestration. the moment you start treating it like a backend, things get messy. your webhook hits n8n, it does its processing dance, and then fires the result somewhere your app can actually use.”
“Lovable and Supabase can support this, but the important decision is not Lovable Cloud versus external Supabase. It is how money and ownership work in the marketplace.”
“Supabase under the hood is not a weakness — it's the best thing about Lovable. It's Postgres, it's what thousands of real companies run on, and it'll handle a marketplace fine. The question isn't "can Lovable build it", it's "can you keep it working once vendors and money are involved".”
“I've been building a multi-tenant app on Supabase and audited my policies before shipping. Found a bug worth sharing, because I suspect it's fairly common.”
“Our applications are deployed to Vercel and access a common Supabase DB that lives in a separate Github repo. The Supabase repo auto-executes pending migrations using Supabase's Github integration.”
“The image-pull time is the real killer, not the CLI init. If you cache the docker layers with actions/cache keyed on the supabase CLI version + your schema hash, you can cut a warm run to under 30s.”
“The image-pull time is the real killer, not the CLI init. If you cache the docker layers with actions/cache keyed on the supabase CLI version + your schema hash, you can cut a warm run to under 30s.”
“It happened only yesterday, and I noticed Supabase pro tier keeps up to previous 7 days backed up. I am wondering if I were to upgrade to it now, if I would be able to restore the data from couple days ago even though I wasn’t subscribed to pro tier until after?”
“I treat PostgreSQL in Supabase as the source-of-truth state machine instead of managing state in n8n. Document statuses use strict enum types (pending, received, under\_review, approved, rejected), and all transitions run via atomic PL/pgSQL RPC functions.”
“I have mine self record into Supabase for my projects and a local sqlite for work. It determines a method of record keeping which I audit every week to hone the process.”
“You often have limited time, so I strongly suggest using Supabase, Firebase, Appwrite, or another BaaS and focusing on actually building the product.”
“Supabase is fine for this, and Stripe Connect does not inherently require Lovable Cloud or external Supabase. The important part is keeping Connect account creation, transfers, and webhook processing in secured server-side functions, with idempotency and strict RLS.”
“If a project is not active supabase just deactivates it. That's why i build and use this free supabase tool to keep the free project in active status.”
“I recently started using Supabase and am setting up two companies. I’m on the free plan and need to configure the backend for the second company. If I create a new project under the same login account used for the first company's backend, will they share the free plan's monthly active user limit of 50,000?”
“The way it works is that when your client does writes, it first writes to local storage and a background process syncs local storage with your backend, which in turn persists data into supabase.”