Admin

Enter your passcode

This passcode keeps casual visitors out. For launch, use a private admin URL and do not share your Admin API Token. Supabase RLS protects couple data.

Nightbloom

Backend & Admin

← Back to app

One-time setup guide — work top to bottom. The Health tab verifies each step. This Option C build uses a separate API Worker + KV for live public config.

Create your backend

Make a free project at supabase.com. In SQL Editor, paste all of garden/supabase-setup.sql and Run.

ii.

Connect this app

This build can load live public config from Cloudflare KV. Use the Connection tab to save the Supabase Project URL/public key for every device using the live site.

iii.

Email deliverability

Configure custom SMTP (Resend, Postmark) so confirmation emails hit the inbox. Full guide in EMAIL-SETUP.md. Set your site URL + redirect URLs in Supabase → Auth → URL Config.

iv.

OAuth (optional)

Supabase → Authentication → Providers → enable Google / Apple. Add your deployed URL to allowed origins.

Push notifications (optional)

Run npx web-push generate-vapid-keys. Paste only the public key in the Push tab. Put the private key in Supabase Edge Function secrets.

vi.

Go live

Deploy the Admin app, Main app, and API Worker separately with wrangler deploy. Protect this admin page with a strong Worker ADMIN_TOKEN, and Cloudflare Access later.

Live checks — run after each setup step. Admin v65 native KV build.

Not checked yet

Press "Run health check" to start.

This tab saves public live config to Cloudflare KV through the same-origin admin Worker first, then API fallback. v65 native KV. It updates the live app for every device after refresh. The Supabase publishable/anon public key is okay here when Row Level Security is enabled. The health check now tests the real live API Worker plus Supabase endpoints. Never paste a service_role key here.

Admin API Token (stored only on this browser)

Supabase Project URL

Supabase Anon (public) Key

Paste your VAPID public key here to save it to live config. The private key is a Supabase function secret — never in the browser.

VAPID Public Key

Generate: npx web-push generate-vapid-keys

Local device analytics — counts from localStorage only. For real multi-couple analytics, query your Supabase dashboard.

—

Days together

—

Date ideas

—

Dates completed

—

Love notes

—

Memories

—

Total spent

—

Total saved

—

Longest streak

Couple details

Local buttons affect localStorage on this device only. The live factory reset below uses the API Worker and requires your private Supabase service role key to be saved as a Worker secret.

This device only

Live Supabase reset

This deletes live app rows and Auth users from Supabase. It is for beta testing only. Type the exact phrase before running it.

Confirm phrase

checking…