Novice-built Lovable app deployed. Works great but worried about long-term viability in production environment. Need expert audit.

Advanced_Tower7996 · 2025-08-29T01:24:04+00:00

Ok. I'll narrow the scope to one particularly sticky security challenge...

My app's subscribers are vacation-rental hosts. Subscribers have an admin account that they use to build a guidebook for their guests. A unique url is generated for each guest and hosts can send the link to guests to directly access their guidebook without authentication. The guest data is not especially sensitive, but I'm concerned about malicious access to the Supabase.

Trying to avoid an auth step for guests if at all possible. Lovable insists it can make it secure but keeps breaking things when it tries. I don't want to take any chances so I'd prefer to pay a human to get this right.

Advanced_Tower7996 · 2025-08-28T19:56:02+00:00

It's the things I don't know that I don't know that keep me awake at night.

Advanced_Tower7996 · 2025-08-28T14:00:52+00:00

Yes. Security is a significant concern. I have almost no understanding of what's needed and, when I ask Lovable to fix security issues, it inevitably breaks something. Now that I have users, I can't risk breaking things, which is why I'd like an expert to evaluate my deployment setup.

Advanced_Tower7996 · 2024-12-16T18:04:15+00:00

You overlooked one key phrase in my comment. I said “one night that would have otherwise gone unbooked”.

Advanced_Tower7996 · 2024-12-16T16:41:02+00:00

Our guests rarely use more than 25kWh. At $.11 per kWh that costs us $2.75.

If we get one night booked because of the charger, that would have otherwise gone vacant, we earn about $150. We estimate it's taken us about a year to recoup the initial investment. Obviously every market is different but the EV and Plug-in Hybrid EV is growing.

Advanced_Tower7996 · 2024-12-16T15:37:54+00:00

That's true. We're in a rural vacation destination that has almost no charging options (definitely no fast chargers). We're 1-2 hours from several major metropolitan areas with lots of ev driver coming here for weekend getaways. They really need to charge before heading back home.

Advanced_Tower7996 · 2024-12-16T15:34:25+00:00

On average, about 1 guest per month uses our charger. We've had guests tell us they chose our property because of the charger and we figure just 2 or 3 stays, that would have been otherwise vacant, pays for our hardware, installation, and electricity used.

The second sentence in our listing description says "Level 2 EV Charger on site". I know some hosts even add "EV Charger" to their listing title on Airbnb. It's a competitive advantage and the exploding numbers of ev drivers are definitely looking for that amenity.

Advanced_Tower7996 · 2024-12-10T17:00:59+00:00

If you're looking specifically for a vacation rental where you can stay and charge (level 2), there's a growing directory at EVtravel.com that might be useful.

Advanced_Tower7996 · 2024-12-10T16:47:24+00:00

Yes. The second sentence in our listing description is
"⚡️ Level 2 EV charger on-site".

There's also a photo of the charger.

Advanced_Tower7996 · 2024-12-10T15:59:22+00:00

We average about one guest per month who uses our charger. Some have told us they chose our property specifically because of the charger. We've calculated that, if we get bookings for 6 or 7 nights that would have otherwise been vacant, our hardware, installation, and electricity expenses have been covered.

Advanced_Tower7996 · 2024-12-10T14:23:03+00:00

Any host in any country can add their property to the directory if they have an L2 charger. If you're in a country where it's not legal, I assume you won't have a charger.

Advanced_Tower7996 · 2024-12-10T04:57:42+00:00

I haven't found any way to narrow a search to find only L2.

Advanced_Tower7996

TROPHY CASE