Managing config and secrets

The Supabase CLI uses a config.toml file to manage local configuration. This file is located in the supabase directory of your project.

Config reference#

The config.toml file is automatically created when you run supabase init.

There are a wide variety of options available, which can be found in the CLI Config Reference.

For example, to enable the "Apple" OAuth provider for local development, you can append the following information to config.toml:

1
2
3
4
5
[auth.external.apple]enabled = falseclient_id = ""secret = ""redirect_uri = "" # Overrides the default auth redirectUrl.

Using secrets inside config.toml#

You can reference environment variables within the config.toml file using the env() function. This will detect any values stored in an .env file at the root of your project directory. This is particularly useful for storing sensitive information like API keys, and any other values that you don't want to check into version control.

1
2
3
4
5
.├── .env├── .env.example└── supabase    └── config.toml

For example, if your .env contained the following values:

1
2
GITHUB_CLIENT_ID=""GITHUB_SECRET=""

Then you would reference them inside of our config.toml like this:

1
2
3
4
5
[auth.external.github]enabled = trueclient_id = "env(GITHUB_CLIENT_ID)"secret = "env(GITHUB_SECRET)"redirect_uri = "" # Overrides the default auth redirectUrl.