Ship It Checklist

Checklists /Lovable + Supabase /Deploy

High

Serve the app on a domain you control, over HTTPS

A Lovable preview URL is fine for building. It is a poor place to send customers: the address can change, and it does not look like your product. Sign-in redirects and cookies also need a stable https origin.

How to check

  1. Open the URL you plan to share. It should be your domain, and the padlock should show https.
  2. The address bar should not be a temporary preview host unless you have decided that host is the product.
  3. Visit the same URL in a private window and confirm the app loads without a certificate warning.
  4. Update the Supabase Site URL to this exact origin after the domain works.

Prompt

Fix prompt
Paste into Cursor or Claude Code
You are working in this repository. Do not add features.

Goal: the app should assume it is served from a single production origin over HTTPS.

Steps:
1. Find every hard-coded preview URL, localhost URL, or http:// URL used for redirects, canonical links or API calls.
2. Replace them with a site URL from an environment variable, and document the name of that variable.
3. Make sure auth redirects and any cookie settings use that origin.
4. Do not change the visual design.
5. List the DNS record I still need to add at the host. Do not invent a registrar login.

This uses the same ticks as the checklist page, saved in this browser.

Related error fixes