What is probably broken
File uploads and downloads work locally but fail in production with permission errors or CORS blocks.
File uploads and downloads work locally but fail in production with permission errors or CORS blocks.
Supabase storage working correctly with proper policies, CORS, and URL configuration.
STEP 01
Storage buckets need policies to allow uploads and downloads.
STEP 02
Browser requests to Supabase storage need CORS headers.
STEP 03
Ensure the app uses the correct storage URL and keys.
Quick check
If you cannot tick all five, we can fix it. Send us the repo and we handle the rest.
Free checklist
Get the exact 5-step checklist we run before every deploy. No fluff, just the things that actually break.
Done-for-you deploy
Fixed price per repo. 24h delivery or full refund. No hourly billing.
Related guides
A practical checklist for moving a Lovable-built app to your own VPS with custom domain, environment variables, database, SSL, backups, and smoke tests.
Read guideA practical checklist for deploying a Lovable app backed by Supabase with safe env vars, auth redirects, database rules, backups, and production smoke tests.
Read guideYour Lovable app works in preview but won't deploy to a real server. Fix build errors, missing env vars, and dead processes. Get your app live today.
Read guide