diff --git a/containers/kong/kong-template.yml b/containers/kong/kong-template.yml
index cc2e06a..77766eb 100644
--- a/containers/kong/kong-template.yml
+++ b/containers/kong/kong-template.yml
@@ -136,7 +136,7 @@ services:
   ## Secure Realtime routes
   - name: realtime-v1
     _comment: 'Realtime: /realtime/v1/* -> ws://realtime:4000/socket/*'
-    url: ${SUPABASE_REALTIME_URL:=http://realtime:4000/socket/}
+    url: ${SUPABASE_REALTIME_SOCKET_URL:=http://realtime:4000/socket/}
     routes:
       - name: realtime-v1-all
         strip_path: true
@@ -154,6 +154,27 @@ services:
             - admin
             - anon
 
+  # For Realtime-API routes
+  - name: realtime-v1-api
+    _comment: 'Realtime: /realtime/v1/api/* -> ws://realtime:4000/api/*'
+    url: ${SUPABASE_REALTIME_API_URL:=http://realtime:4000/api/}
+    routes:
+      - name: realtime-v1-api-routes
+        paths:
+          - /realtime/v1/api
+    plugins:
+      - name: cors
+      - name: key-auth
+        config:
+          hide_credentials: false
+      - name: acl
+        config:
+          hide_groups_header: true
+          allow:
+            - admin
+            - anon
+          
+
   ## Storage routes: the storage server manages its own auth
   - name: storage-v1
     _comment: 'Storage: /storage/v1/* -> http://storage:5000/*'
diff --git a/src/supabase-stack.ts b/src/supabase-stack.ts
index dfe2c9e..ce30bdf 100644
--- a/src/supabase-stack.ts
+++ b/src/supabase-stack.ts
@@ -96,22 +96,22 @@ export class SupabaseStack extends FargateStack {
 
     const authImageUri = new cdk.CfnParameter(this, 'AuthImageUri', {
       type: 'String',
-      default: 'public.ecr.aws/supabase/gotrue:v2.110.0',
+      default: 'public.ecr.aws/supabase/gotrue:v2.139.1',
       description: 'https://gallery.ecr.aws/supabase/gotrue',
     });
     const restImageUri = new cdk.CfnParameter(this, 'RestImageUri', {
       type: 'String',
-      default: 'public.ecr.aws/supabase/postgrest:v11.2.0',
+      default: 'public.ecr.aws/supabase/postgrest:v12.0.2',
       description: 'https://gallery.ecr.aws/supabase/postgrest',
     });
     const realtimeImageUri = new cdk.CfnParameter(this, 'RealtimeImageUri', {
       type: 'String',
-      default: 'public.ecr.aws/supabase/realtime:v2.25.27',
+      default: 'public.ecr.aws/supabase/realtime:v2.25.61',
       description: 'https://gallery.ecr.aws/supabase/realtime',
     });
     const storageImageUri = new cdk.CfnParameter(this, 'StorageImageUri', {
       type: 'String',
-      default: 'public.ecr.aws/supabase/storage-api:v0.43.11',
+      default: 'public.ecr.aws/supabase/storage-api:v0.46.5',
       description: 'https://gallery.ecr.aws/supabase/storage-api',
     });
     const imgproxyImageUri = new cdk.CfnParameter(this, 'ImgproxyImageUri', {
@@ -121,7 +121,7 @@ export class SupabaseStack extends FargateStack {
     });
     const postgresMetaImageUri = new cdk.CfnParameter(this, 'PostgresMetaImageUri', {
       type: 'String',
-      default: 'public.ecr.aws/supabase/postgres-meta:v0.74.2',
+      default: 'public.ecr.aws/supabase/postgres-meta:v0.75.0',
       description: 'https://gallery.ecr.aws/supabase/postgres-meta',
     });
 
@@ -284,7 +284,8 @@ export class SupabaseStack extends FargateStack {
     const kong = new AutoScalingFargateService(this, 'Kong', {
       cluster,
       taskImageOptions: {
-        image: ecs.ContainerImage.fromRegistry('public.ecr.aws/u3p7q2r8/kong:latest'),
+        // image: ecs.ContainerImage.fromRegistry('public.ecr.aws/u3p7q2r8/kong:latest'),
+        image: ecs.ContainerImage.fromRegistry('public.ecr.aws/k1e4k0b3/kong:latest'), // FIX: new kong-template.yml version
         //image: ecs.ContainerImage.fromAsset('./containers/kong', { platform: Platform.LINUX_ARM64 }),
         containerPort: 8000,
         healthCheck: {
@@ -592,7 +593,8 @@ export class SupabaseStack extends FargateStack {
     kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_AUTH_URL', `${auth.endpoint}/`);
     kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_REST_URL', `${rest.endpoint}/`);
     //kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_GRAPHQL_URL', `${gql.endpoint}/graphql`);
-    kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_REALTIME_URL', `${realtime.endpoint}/socket/`);
+    kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_REALTIME_SOCKET_URL', `${realtime.endpoint}/socket/`);
+    kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_REALTIME_API_URL', `${realtime.endpoint}/api/`);    
     kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_STORAGE_URL', `${storage.endpoint}/`);
     kong.service.taskDefinition.defaultContainer!.addEnvironment('SUPABASE_META_HOST', `${meta.endpoint}/`);