How to make a secure MongoDB server?

Posted by Earlz on Server Fault See other posts from Server Fault or by Earlz
Published on 2011-02-20T05:07:37Z Indexed on 2011/02/20 7:26 UTC
Read the original article Hit count: 176

Filed under:

security

|

arch-linux

|

mongodb

|

mongo

Hello, I'm wanting my website to use MongoDB as it's datastore. I've used MongoDB in my development environment with no worries, but I'm worried about security with a public server.

My server is a VPS running Arch Linux. The web application will also be running on it, so it only needs to accept connections from localhost. And no other users(by ssh or otherwise) will have direct access to my server.

What should I do to secure my instance of MongoDB?

© Server Fault or respective owner

Related posts about security

sudo apt-get update errors

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Here is what I get on my terminal when running sudo apt-get update errors. I dont know if the issue is from my sources.list or my proxy setup(have not made any changes to proxies). Thank you for any help in advanced. Ign http://security.ubuntu.com oneiric-security Release.gpg Ign http://security… >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Devx - Search for 'Devx'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
The Security-Developer Gap: Why IT Security Can't Fix Your Security Problems Alone

as seen on Internet.com - Search for 'Internet.com'
Two well-known white hats explain how hackers take advantage of security holes left by enterprise application developers. >>> More
StackOverFlowError while creating Mac object on AS400/Java

as seen on Stack Overflow - Search for 'Stack Overflow'
Hello all, I am a newbie to AS400-Java programming. I am trying to create my first program to test the implementation of Message Authentication Code (MAC). I am trying to use the HMACSHA1 hash function. My (Java 1.4) program runs fine on a dev box (V5R4).But fails terribly on the QA box (V5R3). My… >>> More
Google App Engine - Spring Security Issue (java.security.AccessControlException)

as seen on Stack Overflow - Search for 'Stack Overflow'
I'm currently getting the AccessControlException below when I deploy to app engine (I don't see it when I run in my local environment). I'm using GAE 1.3.1, Spring 3.0.1, and Spring Security 3.0.2. Any ideas how to get around this issue? It appears to be an issue with Spring Security trying to get… >>> More

Related posts about arch-linux

Unable to login to arch linux

as seen on Super User - Search for 'Super User'
I am new to archlinux. I am using live usb for archlinux. When I booted it said not a COM32R image. I explored on Google, used Tab and choose have64 and then it booted. Now I am not able to login I used password root but it's not accepting. I also used startx but nothing happened. I am using archlinux-2014… >>> More
Arch Linux drops me on my school network.

as seen on Super User - Search for 'Super User'
I'm running a Lenovo X61 which i carry around my college for getting on the internet at various points in the day. The network has always been finicky but recently it's gotten worse. I'll connect using iwconfig, get an ip from dhcpcd and log in using vpnc to their system. Sometimes I'll stay connected… >>> More
Regenerating /usr/share/locale/ on Arch Linux

as seen on Super User - Search for 'Super User'
Is there a way to regenerate deleted locale on /usr/share/locale without downloading the application again? >>> More
How to install Archlinux on a acer emachines em350 ?

as seen on Super User - Search for 'Super User'
Do a 64 bits version will work better if the cpu is 64 bits capable ? Can I remove all added stuffs on Archbang or CTKArchLive to return to plain Archlinux with openbox that I can configure myself easily, so I can install Archlinux faster ? I tried and installed Arch properly but I need to install… >>> More
How to run some commands after booting from ArchLinux disk? Or how to change some settings in .iso before booting?

as seen on Server Fault - Search for 'Server Fault'
How to install Arch Linux with traditional installer with only ssh-access to server? There is nice guide: https://wiki.archlinux.org/index.php/Install_from_SSH I try test this on my home vps: Start VPS with any linux bootable cd and login to remote server (vps) wget http://mirrors.kernel.org/archlinux/iso/latest/archlinux-2010… >>> More