How To Restore a Project Paused for More Than 1 Year

1
psql -d [CONNECTION_STRING] -f /path/to/backup_file.backup

1
supabase login
2
supabase link --project-ref [NEW_PROJECT_REF]
3
supabase storage cp /path/to/downloaded/files ss:///bucket_name -r --experimental

1
chmod +x sync_supabase_config.sh

1
#!/usr/bin/env bash
2
set -euo pipefail
3
4
# ---------------------------------------------------------------------------
5
# Sync Supabase project configuration from a SOURCE project to a TARGET project
6
# using the Supabase Management API.
7
#
8
# Usage:
9
#   export SUPABASE_ACCESS_TOKEN="sbp_..."
10
#   ./sync_supabase_config.sh <source_ref> <target_ref> [--dry-run]
11
#
12
# Options:
13
#   --dry-run   Fetch and diff configs without applying changes to the target.
14
#
15
# Output:
16
#   Saves source and target configs to ./config_sync_<timestamp>/ so you can
17
#   review exactly what was (or would be) changed.
18
# ---------------------------------------------------------------------------
19
20
API_BASE="https://api.supabase.com/v1"
21
22
SOURCE_REF="${1:?Usage: $0 <source_ref> <target_ref> [--dry-run]}"
23
TARGET_REF="${2:?Usage: $0 <source_ref> <target_ref> [--dry-run]}"
24
DRY_RUN="${3:-}"
25
26
TOKEN="${SUPABASE_ACCESS_TOKEN:?Set SUPABASE_ACCESS_TOKEN environment variable}"
27
28
AUTH_HEADER="Authorization: Bearer ${TOKEN}"
29
CONTENT_TYPE="Content-Type: application/json"
30
31
if ! command -v jq &>/dev/null; then
32
  echo "Error: jq is required but not installed." >&2
33
  exit 1
34
fi
35
36
# Configs to sync: "label|get_path|update_method|update_path"
37
# pgbouncer is read-only so it is excluded.
38
CONFIGS=(
39
  "Auth|/config/auth|PATCH|/config/auth"
40
  "Realtime|/config/realtime|PATCH|/config/realtime"
41
  "Database Pooler|/config/database/pooler|PATCH|/config/database/pooler"
42
  "Database Postgres|/config/database/postgres|PUT|/config/database/postgres"
43
  "PostgREST|/postgrest|PATCH|/postgrest"
44
  "Storage|/config/storage|PATCH|/config/storage"
45
)
46
47
# ---------------------------------------------------------------------------
48
# Per-config payload transforms applied before PATCH/PUT.
49
# Each function reads JSON from stdin and writes cleaned JSON to stdout.
50
# ---------------------------------------------------------------------------
51
transform_Auth() {
52
  jq 'with_entries(
53
    .key as $k |
54
    select(
55
      (["rate_limit_email_sent", "rate_limit_sms_sent",
56
        "security_captcha_secret", "nimbus_oauth_client_secret",
57
        "db_max_pool_size", "db_max_pool_size_unit",
58
        "api_max_request_duration",
59
        "sessions_single_per_user", "sessions_tags"
60
      ] | index($k)) == null
61
      and ($k | test("^(smtp_|sms_messagebird_|sms_textlocal_|sms_twilio_|sms_vonage_|sms_test_otp|hook_mfa_verification_attempt_|hook_password_verification_attempt_)") | not)
62
      and ($k | test("passkey|web_?authn") | not)
63
      and ($k | test("_secrets?$") | not)
64
    )
65
  )'
66
}
67
68
transform_Database_Pooler() {
69
  jq 'if type == "array" then .[0] else . end
70
      | {default_pool_size, pool_mode}
71
      | with_entries(select(.value != null))'
72
}
73
74
transform_PostgREST() {
75
  jq 'with_entries(select(.value != null))'
76
}
77
78
transform_Storage() {
79
  jq 'del(.capabilities, .migrationVersion, .databasePoolMode, .features)'
80
}
81
82
transform_payload() {
83
  local label="$1"
84
  local func_name="transform_${label// /_}"
85
  if declare -f "$func_name" &>/dev/null; then
86
    "$func_name"
87
  else
88
    cat
89
  fi
90
}
91
92
TMPDIR=$(mktemp -d)
93
trap 'rm -rf "$TMPDIR"' EXIT
94
95
OUTDIR="./config_sync_$(date +%Y%m%d_%H%M%S)"
96
mkdir -p "$OUTDIR"
97
98
echo "============================================="
99
echo "  Supabase Config Sync"
100
echo "  Source : ${SOURCE_REF}"
101
echo "  Target : ${TARGET_REF}"
102
echo "  Output : ${OUTDIR}"
103
[[ "$DRY_RUN" == "--dry-run" ]] && echo "  Mode   : DRY RUN (no changes applied)"
104
echo "============================================="
105
echo
106
107
for entry in "${CONFIGS[@]}"; do
108
  IFS='|' read -r label get_path method update_path <<< "$entry"
109
  safe_label="${label// /_}"
110
111
  echo "--- ${label} ---"
112
113
  # Fetch source config
114
  source_file="${OUTDIR}/${safe_label}_source.json"
115
  http_code=$(curl -s -o "$source_file" -w "%{http_code}" \
116
    "${API_BASE}/projects/${SOURCE_REF}${get_path}" \
117
    -H "$AUTH_HEADER")
118
119
  if [[ "$http_code" != "200" ]]; then
120
    echo "  [SKIP] GET source failed (HTTP ${http_code})"
121
    echo
122
    continue
123
  fi
124
125
  # Fetch target config
126
  target_file="${OUTDIR}/${safe_label}_target.json"
127
  http_code_target=$(curl -s -o "$target_file" -w "%{http_code}" \
128
    "${API_BASE}/projects/${TARGET_REF}${get_path}" \
129
    -H "$AUTH_HEADER")
130
131
  if [[ "$http_code_target" != "200" ]]; then
132
    echo "  [SKIP] GET target failed (HTTP ${http_code_target})"
133
    echo
134
    continue
135
  fi
136
137
  echo "  [OK]   Fetched both configs"
138
139
  # Build transformed payload
140
  payload_file="${TMPDIR}/${safe_label}_payload.json"
141
  transform_payload "$label" < "$source_file" > "$payload_file"
142
143
  # Skip if the transformed payload is empty (source had no usable config)
144
  if [[ "$(jq 'length' "$payload_file")" == "0" ]]; then
145
    echo "  [SKIP] Source config is empty — nothing to apply"
146
    echo
147
    continue
148
  fi
149
150
  # Pretty-print both sides and diff
151
  source_pretty="${TMPDIR}/${safe_label}_src_pretty.json"
152
  target_pretty="${TMPDIR}/${safe_label}_tgt_pretty.json"
153
  jq --sort-keys . "$payload_file"  > "$source_pretty"
154
  jq --sort-keys . "$target_file"   > "$target_pretty"
155
156
  if diff -q "$source_pretty" "$target_pretty" &>/dev/null; then
157
    echo "  [=]    No differences"
158
  else
159
    echo "  [~]    Differences (source → target):"
160
    diff --unified=3 "$target_pretty" "$source_pretty" | sed 's/^/         /' || true
161
  fi
162
163
  if [[ "$DRY_RUN" == "--dry-run" ]]; then
164
    echo
165
    continue
166
  fi
167
168
  # Apply to target
169
  update_response="${TMPDIR}/${safe_label}_response.json"
170
  update_code=$(curl -s -o "$update_response" -w "%{http_code}" \
171
    -X "$method" \
172
    "${API_BASE}/projects/${TARGET_REF}${update_path}" \
173
    -H "$AUTH_HEADER" \
174
    -H "$CONTENT_TYPE" \
175
    -d @"$payload_file")
176
177
  if [[ "$update_code" =~ ^2 ]]; then
178
    echo "  [OK]   Applied to target (HTTP ${update_code})"
179
  else
180
    echo "  [FAIL] ${method} failed (HTTP ${update_code})"
181
    cat "$update_response"
182
    echo
183
  fi
184
185
  echo
186
done
187
188
echo "Done. Configs saved to ${OUTDIR}/"