Compute basis
Two M workloads: Coolify with your application and the identity service; Supabase separate from it. Requests, database size and build frequency determine sizing. The servers are monitored as in managed hosting.
Deployment stack for AI-built apps with Coolify and Supabase
Your application built with AI tools runs on servers in Germany, or in Switzerland or Austria if you prefer: Coolify builds and starts it from the repository, Supabase holds data and sign-in, and you reach administration through a WireGuard VPN.
- Coolify and Supabase
- Administration through WireGuard VPN
- Operated in Germany, Switzerland or Austria
Customers from mid-sized business, industry and the public sector, in Germany and internationally
Starting point
What teams use the deployment stack for
The application was built with Lovable, Bolt, v0, Cursor or another AI tool and runs with a platform provider. For ongoing operations it should move to servers of your own without your team giving up its usual way of working.
Deployment from the repository
Coolify builds the application from the Git repository and starts it, automatically after a push if wanted. Earlier versions of the code can be rolled out again.
Environments for testing and production
Projects and environments keep versions and variables apart. Preview deployments show a change before it goes to production. Whether an environment receives a database of its own is defined in the proposal.
Data and access in your own hands
Supabase runs self-hosted on a workload of its own. Supabase Studio and the Coolify administration are reachable through the VPN, and WZ-IT sets up backups.
How it fits together
Coolify, Supabase and VPN access working together
Coolify
Deployments from GitHub, GitLab, Bitbucket or Gitea, automatically after a push if wanted. Projects with separate environments, preview deployments, rollbacks and HTTPS certificates.
Supabase
PostgreSQL database, sign-in, file storage, realtime and APIs, self-hosted on a workload of its own.
WireGuard
Supabase Studio and the Coolify administration are reached through a WireGuard VPN.
Keycloak or Authentik
Included in the package price. Protocols and roles are defined per application.
Extensions and scope limits
The source code and its further development stay with you. A managed PostgreSQL database can be used instead of Supabase. A rollback in Coolify resets code and image, not the database. Analysis of application logs and a monitoring platform of your own are not part of the package.
- PostgreSQL
Operations
How your deployment stack is operated
Core apps, monitoring and updates within the agreed scope.
Restore order
Planned restore order: Supabase database and file storage, identity service, Coolify configuration with environment variables; the application is rebuilt from the repository.
Checks before release
Check versions of Coolify and the Supabase services individually; verify deployments, sign-in and database access after the update.
Offer
What does operating an AI-built application cost?
The price includes Coolify and Supabase on 2 M workloads. Keycloak or Authentik comes with the package at no extra charge. Setting up WireGuard access is part of provisioning.
Essential, Compute Mfrom €319.60 net per monthEstimate before setup and separate licences.
Calculation
- 2 workloads, one app each included
- €259.80 net per month
- Compute M, 2 workloads
- €59.80 net per month
- Keycloak or Authentik
- included in the package
- Service level: Essential
- included in price
- Total with Business
- €449.40 net per month
- Total with Priority
- €559.40 net per month
- Total with Production
- €719.40 net per month
- Total with Critical
- €929.40 net per month
Straightforward provisioning within a few business days
Payment
- Bank transfer
One-time setup based on scope, specified in the proposal. Additional storage is booked in 50 GB steps: €4.99 net per month. Assess Business for an application in productive use, and a higher service level where availability and response time matter. The service level remains selectable; the published ladder applies.
Selection
Identity service in the package: Keycloak or Authentik
Keycloak or Authentik is included in the package price. You choose the identity service that fits your organisation.
| Choice | Scope | Configurator entry |
|---|---|---|
| Keycloak | OIDC/SAML, brokering and LDAP/AD federation. Realm and client configuration are operating tasks. | Configure package: Keycloak |
| Authentik | OIDC/SAML, sources, flows and LDAP/proxy providers. Account for outposts per integration. | Configure package: Authentik |
Selection
Which size fits your application?
Single-app hosting operates one application. The package adds further apps and shared identity planning; integrations are scoped in the proposal.
| Compute | Resources from registry | Essential, net per month |
|---|---|---|
| S | 2 vCPU · 4 GB RAM · 80 GB NVMe SSD | €259.80 net per month |
| M | 4 vCPU · 8 GB RAM · 80 GB NVMe SSD | €319.60 net per month |
| L | 8 vCPU · 16 GB RAM · 80 GB NVMe SSD | €439.60 net per month |
- M is the starting size. WZ-IT checks which size your use needs before the proposal, based on requests, database size and build frequency. Users are not limited; XL can be selected in the configurator.
Licences and editions
Licences and editions: Coolify, Supabase, sign-in
As of 25 October 2026. Free cores form the pricing basis. Commercial editions and vendor services are separate.
| Licence | Function and boundary |
|---|---|
| Coolify (Apache-2.0) | Checked on 14 November 2026. Self-hosted Coolify without a licence fee. Sign-in to the interface through OAuth providers; Authentik has an SSO guide of its own, Keycloak is not documented separately. Scheduled backups exist for PostgreSQL, MySQL, MariaDB, MongoDB, ClickHouse and SQLite. Licence file · Feature documentation · Edition boundary |
| Supabase (Apache-2.0) | Checked on 14 November 2026. Main repository under Apache-2.0. Self-hosting lacks, among others, branching, managed backups with PITR and the Management API of Supabase Cloud; backups are set up by operations. Licence file · Feature documentation |
| Keycloak (Apache-2.0) | OIDC, SAML and identity brokering in the free core. Licence file · Feature documentation |
| Authentik (MIT) | MIT core with OIDC, SAML, LDAP and proxy providers. Enterprise features have a separate licence and are not included. Licence file · Feature documentation · Edition boundary |
Questions about operating AI-built applications
Answers to the most important questions
- Workload, compute, additional apps, storage and service level are summed from the registry. Keycloak or Authentik is included in the package price. One-time setup is based on scope and defined in the proposal; commercial licences are separate.
- Yes. The two entry links select exactly one identity service in the configurator. An existing customer identity provider can be connected after technical review. Sign-in, roles, blocking and emergency access are reviewed together before approval.
- Yes. Your team keeps developing and contributes changes through the Git repository. Coolify builds and starts the application from it. WZ-IT operates the servers, Coolify, Supabase and the identity service; the application code remains your responsibility.
- Coolify assigns applications and databases to projects and environments and keeps variables for production and preview separate. This does not create separate data sets by itself. Which environments are set up, and whether they receive workloads and databases of their own, is defined in the proposal.
- Both administration interfaces are reached through a WireGuard VPN. The application itself and its public interfaces stay reachable over the internet as far as you intend.
- The servers are monitored as in managed hosting. A monitoring platform of your own with Grafana, Prometheus and Loki is a separate package; analysis of application logs is not part of this package.
- Yes. If the application only needs a database, a managed PostgreSQL database can take the place of Supabase. The price then follows the chosen combination.
- Backup scope and retention are specified in the proposal using the registry components and your requirements. The recovery order shown describes the planning for this package.
- Original files, databases, configuration and customer-owned exportable keys are recorded in the exit scope. Export formats and handover are specified per app. See the data portability framework.
- Operations in data centres in Germany, Switzerland or Austria. A confidentiality agreement under Section 203 German Criminal Code (StGB) is available on request at the German location. A subdomain under wz-it.cloud and one .de domain are included; your own domain can be connected by CNAME. Monthly cancellation with 30 days notice to month-end, no minimum term. WZ-IT sets no user limit; size depends on Compute S to XL and edition limits.
Knowledge
Coolify, Supabase and prototypes in detail
Operations and handover
Related articles
- Deploying AI-Generated Apps Securely to the Cloud: What Companies Must WatchAI tools such as Lovable, Bolt, v0, Replit or Cursor have changed software development. An idea turns into a working app within hours, often without...
- Lovable vs Bolt vs v0: Honest Comparison 2026Vibe coding has become mainstream in 2026. If you search for Lovable vs Bolt vs v0, you are probably trying to answer one practical question:...
Reviews & projects
Managed open source with consulting and operations
Customer feedback on open-source selection, implementation, maintenance and long-term operations.
Networking & Provisioning
WZ-IT moved our studio infrastructure from decentralised individual devices to a central platform: every site is securely connected via VPN, new devices are onboarded automatically and an entire site is provisioned from a template, without manual steps on location. What impressed me most is the breadth and depth of their knowledge: Timo and Robin are not a typical IT provider who sets up a server and leaves. The two of them think their way into highly complex infrastructure and software topics, work through every requirement we put in front of them, and build networking, provisioning and operations so that everything fits together in the end. WZ-IT is an excellent partner for complex software, network and architecture projects.
Steve KirchnerManaging Director, nextGYM GmbH
International
Built in Germany's Ruhr Valley. Running worldwide.
WZ-IT designs, develops and operates infrastructure and software for clients in Germany and internationally. We deliver projects remotely and continue supporting them in ongoing operations after go-live.
Selected projects
- LiveRemote access platform for distributed water treatment plantsABCO Water Systems · Australia · Secure Access & OT
- 81%AWS migration with substantially lower operating costsEVA Real Estate · UAE · Cloud exit & infrastructure
- 98%Provision new sites in minutes instead of hoursnextGYM GmbH · Germany · Automation & IoT
Read client reviews
Operations for AI-built applications
Configure Operations for AI-built applications and request an offer
Choose the identity service and add requirements in the configurator. WZ-IT specifies setup, sizing and operating scope in the proposal.
- You speak directly with Timo and Robin, who are technically responsible
- A professional assessment of your situation
- Concrete next steps for infrastructure, software or AI
The conversation is free and non-binding.
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.
Jakob ÖschlbergerInno7 GmbH
WZ-IT's advice on our Azure migration was technically sound and completely non-binding right from the intro call - we took away a great deal.