Skill UI

This comprehensive checklist guides the secure deployment and hardening of a Supabase project for production use. It covers critical security measures such as enforcing Row Level Security (RLS), separating client and service keys, optimizing connection pooling via Supavisor, setting up Point-in-Time Recovery (PITR) backups, and configuring network restrictions. Use this guide before launching or for conducting security audits to ensure maximum stability and security.

This skill details implementing a ransomware-resistant, immutable backup strategy using the restic tool. It leverages S3-compatible Object Lock (Compliance Mode) to ensure Write Once Read Many (WORM) storage, preventing deletion or modification by attackers. The process includes automated backup, cryptographic integrity verification (restic check), and scheduled restore testing, adhering to advanced security standards like 3-2-1-1-0.

This skill provides a comprehensive framework for validating backup reliability. It automates processes like cryptographic hash verification, running simulated restores to isolated environments, detecting silent data corruption (bit rot), and scanning for ransomware indicators. Use it before relying on backups during a major incident or ransomware attack to ensure data recoverability and compliance.