Remove openclaw. Start supabase work. In flight

roles/supabase/tasks/main.yml

@@ -452,7 +452,30 @@
           caCertificate: ""
 
 # ------------------------------------------------------------------
-# Step 7: Wait for Kong deployment to be healthy
+# Step 7: NodePort Service for external PostgreSQL access
+# ------------------------------------------------------------------
+- name: Create NodePort Service for external PostgreSQL access
+  kubernetes.core.k8s:
+    state: present
+    definition:
+      apiVersion: v1
+      kind: Service
+      metadata:
+        name: "{{ supabase_db_fullname }}-external"
+        namespace: "{{ supabase_namespace }}"
+      spec:
+        type: NodePort
+        selector:
+          app.kubernetes.io/name: "{{ supabase_db_fullname }}"
+          app.kubernetes.io/instance: "{{ supabase_release_name }}"
+        ports:
+          - name: postgres
+            port: 5432
+            targetPort: 5432
+            nodePort: "{{ supabase_db_nodeport | int }}"
+
+# ------------------------------------------------------------------
+# Step 9: Wait for Kong deployment to be healthy
 # ------------------------------------------------------------------
 - name: Wait for Kong deployment to be ready
   kubernetes.core.k8s_info:
@@ -468,7 +491,7 @@
   delay: 10
 
 # ------------------------------------------------------------------
-# Step 8: Summary
+# Step 10: Summary
 # ------------------------------------------------------------------
 - name: Display Supabase deployment summary
   ansible.builtin.debug:

roles/supabase/tasks/vault_secrets.yml

@@ -144,6 +144,15 @@
       openai_api_key: "{{ __supabase_openai_api_key }}"
   no_log: "{{ supabase_no_log }}"
 
+- name: Write postgres_url to oys/dev/supabase in Vault
+  community.hashi_vault.vault_kv2_write:
+    path: oys/dev/supabase
+    engine_mount_point: "{{ supabase_vault_mount }}"
+    data:
+      postgres_url: >-
+        postgresql://postgres:{{ __supabase_db_password }}@{{ supabase_db_external_host }}:{{ supabase_db_nodeport }}/{{ supabase_db_name }}
+  no_log: "{{ supabase_no_log }}"
+
 - name: Report vault secret status
   ansible.builtin.debug:
     msg: >-