Website administration
Site administrators manage the whole deployment at /admin. Workspace admins manage their own products, licenses and team. Site-admin access is stored in Supabase, separately from workspace roles.
Initial site administrator
Apply supabase/migrations/025_site_administration.sql after the earlier migrations. Bootstrap the initial account with npm run bootstrap:admin -- --password-stdin, supplying its password through standard input. The initial email defaults to huntiez@ik.me and can be overridden by ADMIN_EMAIL. The password is bcrypt-hashed before storage in the users table; it is never stored in source code or returned by an API.
Open or close registration
Sign in as a site administrator, open /admin, and toggle Allow public signups. The setting is saved in Supabase and takes effect immediately for email, Google and Discord registration. No redeployment or environment-variable change is needed. Existing users can still sign in when registrations are closed. Public registration creates a workspace admin, never a site administrator.
Add or remove site administrators
Use Site administrators in /admin. Enter an existing active account’s email with no password to grant it access. To create a new account, enter its email and a password of at least 12 characters. You cannot revoke your own site-admin access. Changes are checked in the database and recorded in the audit log. Workspace user and reseller tools cannot modify other site administrators.
Credentials and permissions
Credentials live in Supabase’s application users table. Passwords are bcrypt hashes; no shared default password is embedded in the application. Site-admin access comes from users.is_platform_admin for an active account. The old AUTHIX_PLATFORM_ADMIN_EMAILS and AUTHIX_PUBLIC_SIGNUP_ENABLED variables no longer control access or registration.
Hosting and database
Manage domains and deployments through your host; backups, storage and migrations through Supabase. OAuth provider credentials remain server-side deployment secrets. The admin panel reports whether Google and Discord sign-in are configured.