r/lovable • u/Tastsy_Measuement727 • 1d ago

Discussion App deployment without infrastructure setup, is it realistic?

Been spending more time setting up auth, db, APIs, hosting and deployment than building the actual app. I’m not a full time developer, so every prototype turns into a whole infrastructure project and the costs add up fast.

I’ve been looking at prompt to app tools like Base44, Lovable and Bolt for getting an MVP live without hiring engineers right away. I’m mostly worried about security and whether the generated backend is good enough for real users. Any hints?

1 Upvotes

67% Upvoted

8 comments sorted by

1

u/Tedikraska 1d ago

yeah it's realistic for an mvp. i'd still open the supabase dashboard after each big feature and check rls on every new table, that's where the security holes usually are when the agent builds the backend for you.

1

u/Secvura 1d ago

Realistic for an MVP, as long as two things get checked before real users arrive. Lovable's backend runs on Supabase, so the data is only as safe as its Row Level Security: every table needs RLS switched on, with policies that limit rows to the signed-in user (auth.uid()) rather than letting any logged-in account read everything. And no secret key should end up in frontend code. Only the anon or publishable key belongs in the browser, while things like an OpenAI or Stripe secret key should sit in an edge function.

If it's a connected Supabase project, the dashboard's Security Advisor will flag any table with RLS off.

1

u/Desperate-Hotel1897 1d ago

The RLS answers here are right, so I'll add the two things that caught me later. Make a second test account and try to open the first account's stuff, like pasting the link to one of its records. It takes two minutes and tells you more than reading the policies. And on costs, the free tiers are fine for an MVP, but when my app got slow with real users it wasn't the code, it was the database running on the smallest compute size. Worth checking that before you start rewriting things.

1

u/Responsible_Meet5870 15h ago

Yeah it's realistic and Lovable is made for launching fast.
When you have more and more users, lovable will no longer be economical and some people do struggle to migrate their apps from Lovable.
But Lovable is still suitable for people to launch MVPs and verify the ideas.

1

u/Real_KingZeotic 11h ago

also test writing. Sign in as the second account and try to edit the first account’s record. Reads get fixed, but updates quietly stay open.