{"id":1840,"date":"2026-09-05T09:24:25","date_gmt":"2026-09-05T03:54:25","guid":{"rendered":"https:\/\/cpanelfree.com\/blog\/how-to-self-host-supabase-alternative-firebase-vps\/"},"modified":"2026-09-05T12:57:40","modified_gmt":"2026-09-05T07:27:40","slug":"how-to-self-host-supabase-alternative-firebase-vps","status":"publish","type":"post","link":"https:\/\/cpanelfree.com\/blog\/how-to-self-host-supabase-alternative-firebase-vps\/","title":{"rendered":"How to Self-Host Supabase on Ubuntu VPS with Docker (Free Firebase Alternative)"},"content":{"rendered":"

Why Self-Host Supabase on Your Own Cloud VPS?<\/h2>\n

Supabase is the premier open-source alternative to Google Firebase. It provides developers with a full enterprise stack: an ACID-compliant PostgreSQL database, automated instant REST and GraphQL APIs (PostgREST), real-time WebSocket subscriptions, complete user authentication with OAuth providers (GoTrue), AI vector embeddings (pgvector), and a web-based administrative Studio dashboard.<\/p>\n

While Supabase Cloud offers a generous managed tier, high-concurrency applications, vector search workloads, and large file storage pools can quickly exceed free allowances. Self-hosting Supabase on an Ubuntu Cloud VPS provides 100% data sovereignty, zero database row limits, unlimited storage volumes, and total freedom to customize PostgreSQL extensions\u2014without recurring SaaS bills.<\/p>\n

In this technical deployment playbook, we will configure official Supabase Docker Compose on Ubuntu 24.04\/22.04 LTS, generate production cryptographic secrets, configure PostgreSQL with pgvector, and expose the Studio dashboard securely behind an Nginx reverse proxy with SSL encryption.<\/p>\n

Step 1: Installing Docker Engine and Git<\/h2>\n

Ensure your Ubuntu VPS has Docker Engine and Docker Compose V2 installed:<\/p>\n

# Update package list and install Docker prerequisite tools\nsudo apt update && sudo apt install -y curl git openssl ca-certificates\n\n# Install official Docker CE and compose plugin\ncurl -fsSL https:\/\/get.docker.com | sudo sh\nsudo systemctl enable --now docker<\/code><\/pre>\n
Step 2: Cloning the Official Supabase Docker Repository<\/h2>\n
Clone the official Supabase repository and navigate to the production Docker directory:<\/p>\n
# Clone Supabase repository\ngit clone --depth 1 https:\/\/github.com\/supabase\/supabase \/var\/www\/supabase\n\n# Enter docker orchestration folder\ncd \/var\/www\/supabase\/docker\n\n# Copy production environment template\ncp .env.example .env<\/code><\/pre>\n
Step 3: Generating Cryptographic Security Secrets<\/h2>\n
Never run Supabase in production with default secrets. You must generate unique cryptographic tokens for JWT signing, database root credentials, and API secret keys:<\/p>\n
# Generate random 32-character database and JWT secrets\nopenssl rand -hex 32\nopenssl rand -hex 32\nopenssl rand -base64 32<\/code><\/pre>\n
Edit \/var\/www\/supabase\/docker\/.env<\/code> and configure the following essential environment keys:<\/p>\n
# Database Credentials\nPOSTGRES_PASSWORD=YourStrongDatabasePassword2026!\nPOSTGRES_DB=postgres\n\n# API & Studio Security\nJWT_SECRET=YourSuperLongJwtSecretKeyAtLeast32Chars!\nANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\nSERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\n\n# Web Dashboard Credentials\nDASHBOARD_USERNAME=admin\nDASHBOARD_PASSWORD=UltraSecureAdminPass2026!\n\n# Public Base URLs\nSITE_URL=https:\/\/app.example.com\nAPI_EXTERNAL_URL=https:\/\/supabase.example.com<\/code><\/pre>\n
Step 4: Launching Supabase Fleet via Docker Compose<\/h2>\n
Start the Supabase microservices cluster in background daemon mode:<\/p>\n
# Pull latest container images and launch cluster\ndocker compose up -d\n\n# Verify that all 11 Supabase services are healthy\ndocker compose ps<\/code><\/pre>\n
Step 5: Nginx Reverse Proxy Configuration & SSL Setup<\/h2>\n
Expose the Supabase Kong API gateway (port 8000) and Studio dashboard (port 3000 or 8000) via Nginx at \/etc\/nginx\/sites-available\/supabase.example.com<\/code>:<\/p>\n
server {\n    listen 80;\n    server_name supabase.example.com;\n\n    client_max_body_size 100M;\n\n    location \/ {\n        proxy_pass http:\/\/127.0.0.1:8000;\n        proxy_http_version 1.1;\n        proxy_set_header Upgrade $http_upgrade;\n        proxy_set_header Connection \"upgrade\";\n        proxy_set_header Host $host;\n        proxy_set_header X-Real-IP $remote_addr;\n        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n        proxy_set_header X-Forwarded-Proto $scheme;\n    }\n}<\/code><\/pre>\n
Activate the configuration and issue a free Let’s Encrypt SSL certificate:<\/p>\n
sudo ln -s \/etc\/nginx\/sites-available\/supabase.example.com \/etc\/nginx\/sites-enabled\/\nsudo nginx -t && sudo systemctl reload nginx\nsudo certbot --nginx -d supabase.example.com<\/code><\/pre>\n
Supabase Architecture Component Overview<\/h2>\n\n\n\n\n\n\n\n\n
Component<\/th>\nUnderlying Technology<\/th>\nFunction<\/th>\n<\/tr>\n<\/thead>\n
PostgreSQL 15<\/strong><\/td>\nCustom Engine + pgvector<\/td>\nCore relational & vector embedding database<\/td>\n<\/tr>\n
GoTrue<\/strong><\/td>\nGo Authentication Server<\/td>\nHandles user signups, logins, JWTs, and OAuth<\/td>\n<\/tr>\n
PostgREST<\/strong><\/td>\nHaskell Web Server<\/td>\nConverts PostgreSQL schema into instant REST APIs<\/td>\n<\/tr>\n
Realtime<\/strong><\/td>\nElixir Phoenix Engine<\/td>\nBroadcasts database changes via WebSockets<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
Production Security & Backup Checklist<\/h2>\n