# Guides

> Fixes, written down. Straight answers to the problems founders search for at 2am.

Canonical: https://adeolaforgehq.com/guides/

## Build

- - [Converting a Next.js app to iOS and Android with Capacitor](https://adeolaforgehq.com/guides/convert-nextjs-to-ios-android-capacitor/) - Step-by-step technical guide to export Next.js App Router projects, configure Capacitor native plugins, add biometric login, and pass Apple review.
- - [Packaging a Lovable web app for the Apple App Store](https://adeolaforgehq.com/guides/packaging-lovable-app-for-apple-app-store/) - The technical steps to package a Lovable app for iOS, pass Apple App Store review, and avoid the guideline 4.2 minimum functionality rejection.
- - [How much does a web app cost to build](https://adeolaforgehq.com/guides/how-much-does-a-web-app-cost/) - The questions that actually decide the price, and why any quote given before scoping is a guess.
- - [Why Apple rejected your app, and what to do about it](https://adeolaforgehq.com/guides/why-apple-rejected-my-app/) - The rejections we see most on wrapped web apps, what each one actually means, and how to answer review.
- - [Why your Stripe webhook is not working](https://adeolaforgehq.com/guides/stripe-webhook-not-working/) - The payment succeeded and your app never found out. Six causes, and how to tell which is yours.
- - [Turning your web app into iOS and Android apps](https://adeolaforgehq.com/guides/convert-web-app-to-ios-android/) - What Capacitor actually does, the one architectural decision that matters, and why Apple rejects apps like yours.


## Fix

- - [Hardening Supabase and Node backends for production](https://adeolaforgehq.com/guides/hardening-supabase-nodejs-backend-production/) - Practical steps to configure connection pooling, eliminate slow RLS queries, implement webhook idempotency, and isolate backend secrets.
- - [Migrate a Lovable app from Vite to Next.js and Supabase](https://adeolaforgehq.com/guides/migrate-lovable-vite-to-nextjs-supabase/) - How to extract a Lovable web app from client-side Vite into Next.js App Router, migrate Supabase auth to server cookies, and deploy standalone.
- - [How to fix infinite recursion in Supabase RLS](https://adeolaforgehq.com/guides/how-to-fix-infinite-recursion-in-supabase-rls/) - How to resolve error 42P17 infinite recursion detected in policy for relation in Supabase when querying team or organization memberships.
- - [How to migrate a vibe-coded app to a standalone codebase](https://adeolaforgehq.com/guides/how-to-migrate-vibe-coded-app-to-standalone/) - How to safely extract an AI-generated web app from platforms like Lovable or Bolt into an independent codebase and dedicated database you own.
- - [The vibe coded MVP audit checklist](https://adeolaforgehq.com/guides/vibe-coded-mvp-audit-checklist/) - A practical 6-point checklist to find hidden security flaws, exposed secrets, and database performance traps in AI-generated web applications.
- - [The production web app penetration testing checklist](https://adeolaforgehq.com/guides/web-app-security-testing-checklist/) - A practical technical checklist for founders and engineers to test web applications for critical authorization bugs, data leaks, and authentication flaws.
- - [Taking over a codebase someone else built](https://adeolaforgehq.com/guides/taking-over-someone-elses-codebase/) - What to ask before you hand your project to someone new, and why a proper audit before any fix work protects you, not just them.
- - [Lovable Cloud to Supabase migration, what it actually involves](https://adeolaforgehq.com/guides/lovable-cloud-to-supabase-migration/) - What actually needs to move, in what order, and the mistake that causes silent data loss.
- - [What it actually costs to fix a vibe-coded app](https://adeolaforgehq.com/guides/what-a-vibe-coded-app-costs-to-fix/) - What actually drives the price, the three tiers of work, and why an hourly quote is the wrong question to ask.
- - [Is your Lovable app ready for real users? Ten checks](https://adeolaforgehq.com/guides/lovable-app-not-ready-for-real-users/) - Ten checks between a demo that works and a product that takes real money. Run them before launch, not after.
- - [Supabase RLS policies that actually work](https://adeolaforgehq.com/guides/supabase-rls-policies-that-actually-work/) - The four patterns that cover most apps, and why the policy you copied off a forum protects nothing.
- - [Your Supabase service role key is in your frontend. Do this now](https://adeolaforgehq.com/guides/service-role-key-exposed-what-to-do/) - If that key shipped to the browser, every security policy you have is bypassed. The fix, in order.
- - [Check whether your Supabase data is public in five minutes](https://adeolaforgehq.com/guides/check-supabase-rls-in-5-minutes/) - Four checks you can run yourself, without a developer, to find out whether strangers can read your database.
- - [Why your Lovable app shows a blank page after deploy](https://adeolaforgehq.com/guides/lovable-app-blank-page-after-deploy/) - It worked in preview and your domain shows nothing. Four causes, in the order worth checking.


## Automate

- - [The book launch email sequence: what to send and when](https://adeolaforgehq.com/guides/book-launch-email-sequence/) - Eight emails from 30 days before launch to 30 days after, and how to automate most of them.
- - [n8n or Make.com for a small business: how we choose](https://adeolaforgehq.com/guides/n8n-vs-make-for-small-business/) - Not a feature table. The four questions that actually decide which one you should be on.


## Grow

- - [Author website checklist: 12 things every author site needs](https://adeolaforgehq.com/guides/author-website-checklist/) - Use it to check your current site, or to brief whoever builds your next one.
- - [Why your author website does not show up on Google](https://adeolaforgehq.com/guides/author-website-not-showing-on-google/) - Amazon, Goodreads and Instagram outrank most author sites. The seven reasons why, in the order we check them.
