Yes, we have plenty of customers doing just that. You can connect to the pg instance directly or using the connection pooler. You can also disable the Data API (PostgREST) if you want so that you have less security surface area to manage (eg, you don’t need to set up RLS policies if you are connecting only from the server)

awesome to know! but disabling rls and the data api does sabotage the use of supabase auth right? (in ref. to my previous message, just confirming if my checks were correct) i actually just wanted to use supabase because how convient it was for the entire auth flow. password email, reset etc. having to manually built a ui for it is out of question but the solution I am using right now (ory/kratos) has some cli utilities so that helps but still not as good as supabase auth ui ofc. keep making it better!

You can still use all the Authentication features of supabase Auth if you disable the data APIs (you just don’t need to use RLS for managing Authorization to your data)

Supabase is designed to work like LEGO, you add the blocks you want, and we keep everything as modular as possible so that you can combine it with other services like kratos if you prefer