refactor: derive GoTrue URLs from SITE_URL + SUPABASE_PUBLIC_URL — only 2 vars to change between local and prod

.env

@@ -22,13 +22,15 @@ DASHBOARD_USERNAME=supabase
 DASHBOARD_PASSWORD=mc-cars-studio
 
 # ---- Public URLs (as seen from the browser) ----
+# Only two URLs to change between local dev and production:
+#   Local:  http://localhost:55580  /  http://localhost:55521
+#   NAS:    https://demo.lago.dev   /  https://demo.lago.dev
 SITE_URL=http://localhost:55580
-API_EXTERNAL_URL=http://localhost:55521
 SUPABASE_PUBLIC_URL=http://localhost:55521
 
 # ---- GoTrue (Auth) ----
-GOTRUE_SITE_URL=http://localhost:55580
+# API_EXTERNAL_URL, GOTRUE_SITE_URL, GOTRUE_URI_ALLOW_LIST are derived
-GOTRUE_URI_ALLOW_LIST=http://localhost:55580,http://localhost:55580/admin.html
+# automatically from SITE_URL / SUPABASE_PUBLIC_URL in docker-compose.yml.
 DISABLE_SIGNUP=true
 ENABLE_EMAIL_SIGNUP=true
 ENABLE_EMAIL_AUTOCONFIRM=true

docker-compose.yml

@@ -63,14 +63,14 @@ services:
     environment:
       GOTRUE_API_HOST: 0.0.0.0
       GOTRUE_API_PORT: 9999
-      API_EXTERNAL_URL: ${API_EXTERNAL_URL}
+      API_EXTERNAL_URL: ${SUPABASE_PUBLIC_URL}
 
       GOTRUE_DB_DRIVER: postgres
       GOTRUE_DB_DATABASE_URL: postgres://supabase_auth_admin:${POSTGRES_PASSWORD}@db:5432/${POSTGRES_DB}?search_path=auth
       DB_NAMESPACE: auth
 
       GOTRUE_SITE_URL: ${SITE_URL}
-      GOTRUE_URI_ALLOW_LIST: ${GOTRUE_URI_ALLOW_LIST}
+      GOTRUE_URI_ALLOW_LIST: ${SITE_URL},${SITE_URL}/admin.html
       GOTRUE_DISABLE_SIGNUP: ${DISABLE_SIGNUP}
 
       GOTRUE_JWT_ADMIN_ROLES: service_role