v1.0.0

What's Changed

• fix(caddy): emit OIDC global security block and auth host exactly once by @zieddhf in #142
• Enable OIDC in monitor configuration by @zieddhf in #141
• Update CPU usage expression in server-stats template by @zieddhf in #140
• fix(monitor): Grafana v13 dashboards + postgres exporter metrics by @zieddhf in #139
• feat(supabase): add opt-out log drain via docker-compose-logs.yml (Logflare + Vector) by @zieddhf in #137
• fix(agent_access): repair supabase-agent query and list_tables tools by @zieddhf in #134
• fix(scripts): assert forced-command and no-forwarding semantics in verify-connection.sh by @zieddhf in #132
• Rebrand to Supabase Self-Host Ops and restructure documentation by @baderdean in #129
• fix(setup): single-document playbook and distro-aware Python bootstrap by @zieddhf in #130
• feat(setup): add env lock to prevent secret clobber on re-run by @baderdean in #128
• feat(manifest+agent): emit instance manifest, connect agents over SSH stdio by @baderdean in #123
• docs(agents): add self-hosted operating guide for AI agents by @baderdean in #122
• feat(backup): automated backups + PITR with pgBackRest by @baderdean in #119
• fix(monitor): wrap server-stats dashboard in raw (keep Grafana {{label}} refs) by @zieddhf in #114
• fix(kong): render mcp allow list as inline YAML flow (trim_blocks-safe) by @zieddhf in #113

Full Changelog: https://github.com/ankaboot-source/supabase-selfhost-ops/commits/v1.0.0

ansible-supabase v1.0.0-rc3

What's Changed

• feat(mcp): secure MCP remote access via SSH tunnel by @baderdean in #95
• docs(readme): make secure full-featured setup the default install path by @baderdean in #94
• feat(installer): add deterministic config-based setup.sh by @baderdean in #96
• Trigger deploy supabase instances on release by @zieddhf in #98
• Update mailer subjects to remove brand name by @zieddhf in #97
• feat(migrate): add Layer 1 migration script from supabase.com by @baderdean in #100
• Update server-stats dashboard by @zieddhf in #101
• Fix(caddy): restart caddy after setup is done by @zieddhf in #102
• feat(caddy): add sso_allow_list config for github/gitlab/generic providers by @zieddhf in #103
• fix(migrate): dynamic schema discovery + single dump/restore fixes triggers and silent failures by @zieddhf in #104
• docs(agents): document known pitfalls and lessons learned by @zieddhf in #105
• fix(supabase): bind Postgres SSL cert to the real Supabase domain by @zieddhf in #106
• fix(mcp): pin network subnet + allow Docker gateway for /mcp by @zieddhf in #110
• docs(readme): fix table-of-contents anchor links by @zieddhf in #111

New Contributors

• @baderdean made their first contribution in #95

Full Changelog: v1.0.0-rc2...v1.0.0-rc3

ansible-supabase v1.0.0-rc2

What's Changed

• Update grafana.ini to latest version & add grafana builtin basicauth by @zieddhf in #83
• Fix: add GRAFANA_GITHUB_AUTH_ENABLED to enable/disable Grafana GitHub Oauth by @zieddhf in #84
• Fix monitor by @zieddhf in #85
• Fix: remove duplicate home.json files by @zieddhf in #86
• Add auto-generate supabase keys script & update documentations by @zieddhf in #88

Full Changelog: v1.0.0-rc1...v1.0.0-rc2

ansible-supabase v1.0.0-rc1

What's Changed

• Install Supabase protected by Caddy security using Ansible roles by @zieddhf in #2
• Add monitor role templates by @zieddhf in #5
• add monitor reverse-proxy envs by @zieddhf in #6
• Update README.md by @zieddhf in #7
• Update README.md by @zieddhf in #8
• Remove unnecesary options by @zieddhf in #9
• Update README.md by @zieddhf in #10
• Update README.md by @zieddhf in #11
• Update README.md by @zieddhf in #12
• Update grafana.ini to latest version & add GitHub & anonymous auth by @zieddhf in #15
• Add Caddy and DNS docs by @zieddhf in #17
• Dedicated caddy authentication endpoint by @zieddhf in #19
• Update main README.md by @zieddhf in #20
• Update README.md by @zieddhf in #21
• Add fail2ban role by @zieddhf in #25
• Fix typo by @zieddhf in #27
• Fix: database failed to init due to directory /var/lib/postgresql/data exists but is not empty by @zieddhf in #28
• Update Supabase services by @zieddhf in #29
• Add automated Postgres SSL with Caddy/Let’s Encrypt by @zieddhf in #32
• Feat: Backup supabase/postgres into S3 storage by @zieddhf in #35
• Fix: add missing script options by @zieddhf in #42
• Feat: Optional OIDC, basicauth, IP whitelisting, add generic OIDC by @zieddhf in #45
• Add firewall ansible role by @zieddhf in #48
• Add ufw role to playbook-supabase.yml by @zieddhf in #49
• Deploy supabase instance for M3llm by @zieddhf in #52
• Fix supabase deployment [M3llm] by @zieddhf in #53
• Update services ports by @zieddhf in #54
• Add missing variables for supabase deployment by @zieddhf in #55
• Inject M3llm edge secrets during deployment by @zieddhf in #56
• Refactor env var injection in deploy-m3llm-supabase.yml by @zieddhf in #57
• Refactor SSH action environment variables by @zieddhf in #58
• Create shared-net docker network for cross-project container communication by @zieddhf in #59
• Keep default templates and handle shared-network for openwebui via CI/CD by @zieddhf in #60
• Fix path for docker-compose-supabase.yml.j2 by @zieddhf in #61
• Add default network for db service by @zieddhf in #62
• Restart Supabase services with down and up commands by @zieddhf in #63
• Add monitor for m3llm by @zieddhf in #64
• Add Grafana configuration variables to deploy workflow by @zieddhf in #65
• Update env/supabase.yml by @zieddhf in #66
• Enable monitor anonymous access and update GitHub auth settings by @zieddhf in #67
• Run services on local network interface by default by @zieddhf in #68
• Add supabase-studio & grafana in docker shared network [m3llm] by @zieddhf in #69
• keep monitor services on default network by @zieddhf in #70
• Fix URL scheme in promtail-config.yml.j2 by @zieddhf in #71
• fix(promtail): mount docker logs and add pipeline stage to enable container log ingestion by @zieddhf in #72
• Feat: At rest encryption role (Luks) by @zieddhf in #50
• Remove m3llm supabase-db from shared-net by @zieddhf in #73
• M3llm/supabase stack deployment Trigger by @zieddhf in #74
• Sync supabase templates with latest self-hosted version by @zieddhf in #75
• fix: update Supabase ownership permissions by @zieddhf in #76
• feat: multi-env supported supabase templates by @zieddhf in #77
• Add leadminer-supabase trigger workflow by @zieddhf in #78
• fix: rename environment to deploy_env to avoid Ansible keyword conflict by @zieddhf in #79
• fix: use inline expression for deploy_env to avoid trim_blocks issue by @zieddhf in #81

New Contributors

• @zieddhf made their first contribution in #2

Full Changelog: https://github.com/ankaboot-source/ansible-supabase/commits/v1.0.0-rc1