dca1b90faa
- DB: audit_log 테이블(diff 포함) + subscriptions.admin_note + super_admin role - Edge Functions 4개: admin-users, admin-subscriptions, admin-payments, admin-audit-log - 공유 유틸: admin-auth.ts(권한 검증), audit.ts(감사로그 기록) - Swagger UI: 독립 정적 페이지 + OpenAPI 3.0 spec - CRUD 페이지: 구독 생성/수정/삭제, role 변경, 감사로그 목록/상세 - recharts: feature별 StackedBar + DAU Line + Top Users HorizontalBar - 결제 이력: DB + Payple API 병행 조회 - 권한: super_admin만 위험 작업, admin은 조회 전용 - RLS: admin/super_admin IN 정책 + super_admin 쓰기 정책 - SQL RPC: admin_usage_by_feature, admin_top_users, admin_dau
139 lines
2.4 KiB
TOML
139 lines
2.4 KiB
TOML
# Supabase 프로젝트 설정 (로컬 개발 + CLI 기준)
|
|
# 공식 문서: https://supabase.com/docs/guides/cli/config
|
|
|
|
project_id = "d3ro-voice"
|
|
|
|
[api]
|
|
enabled = true
|
|
port = 54321
|
|
schemas = ["public", "storage"]
|
|
extra_search_path = ["public", "extensions"]
|
|
max_rows = 1000
|
|
|
|
[db]
|
|
port = 54322
|
|
shadow_port = 54320
|
|
major_version = 17
|
|
|
|
[db.pooler]
|
|
enabled = false
|
|
|
|
[db.seed]
|
|
enabled = true
|
|
sql_paths = ["./seed.sql"]
|
|
|
|
[realtime]
|
|
enabled = true
|
|
|
|
[studio]
|
|
enabled = true
|
|
port = 54323
|
|
|
|
[inbucket]
|
|
enabled = true
|
|
port = 54324
|
|
|
|
[storage]
|
|
enabled = true
|
|
file_size_limit = "50MiB"
|
|
|
|
[auth]
|
|
enabled = true
|
|
site_url = "http://localhost:5173"
|
|
additional_redirect_urls = [
|
|
"http://localhost:5173",
|
|
"http://localhost:3000",
|
|
"http://localhost:3001",
|
|
"https://d3ro.dev",
|
|
"d3ro-voice://auth-callback"
|
|
]
|
|
jwt_expiry = 3600
|
|
enable_signup = true
|
|
enable_anonymous_sign_ins = false
|
|
enable_manual_linking = false
|
|
|
|
[auth.email]
|
|
enable_signup = true
|
|
double_confirm_changes = true
|
|
enable_confirmations = false
|
|
|
|
[auth.external.google]
|
|
enabled = true
|
|
client_id = "env(GOOGLE_OAUTH_CLIENT_ID)"
|
|
secret = "env(GOOGLE_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[auth.external.github]
|
|
enabled = true
|
|
client_id = "env(GITHUB_OAUTH_CLIENT_ID)"
|
|
secret = "env(GITHUB_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[auth.external.apple]
|
|
enabled = true
|
|
client_id = "env(APPLE_OAUTH_CLIENT_ID)"
|
|
secret = "env(APPLE_OAUTH_SECRET)"
|
|
redirect_uri = ""
|
|
|
|
[edge_runtime]
|
|
enabled = true
|
|
policy = "per_worker"
|
|
inspector_port = 8083
|
|
|
|
[functions.stt-proxy]
|
|
verify_jwt = true
|
|
|
|
[functions.llm-proxy]
|
|
# 2026 sb_publishable_ 키와 Gateway JWT 검증 비호환 — requireUser()에서 직접 인증
|
|
verify_jwt = false
|
|
|
|
[functions.stripe-checkout]
|
|
verify_jwt = true
|
|
|
|
[functions.stripe-portal]
|
|
verify_jwt = true
|
|
|
|
[functions.stripe-webhook]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-checkout]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-webhook]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-manage]
|
|
verify_jwt = false
|
|
|
|
[functions.payple-renew]
|
|
verify_jwt = false
|
|
|
|
[functions.team-invite]
|
|
verify_jwt = true
|
|
|
|
[functions.team-accept]
|
|
verify_jwt = true
|
|
|
|
[functions.send-push]
|
|
verify_jwt = true
|
|
|
|
[functions.embed-chunks]
|
|
verify_jwt = true
|
|
|
|
[functions.search-knowledge]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-users]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-subscriptions]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-payments]
|
|
verify_jwt = true
|
|
|
|
[functions.admin-audit-log]
|
|
verify_jwt = true
|
|
|
|
[analytics]
|
|
enabled = false
|