3 ms·

I've got some Heroku projects, which don't have a static ip. How do I protect myself against this?

• Linkd 6y ago
  Simply set a secure password on any DB instances exposed to the internet.
  • vulcan01 6y ago
    Ah, I see. So no need to find a static IP to use :) Thank you.
    • quasarj 6y ago
      I mean, if the database is not directly available on the internet, that would be a great help as well.
      • Linkd 6y ago
        Agreed, password is the bare minimum.
  • TwoBit 6y ago
    Are the databases being meowed lacking any passwords?
    • steffan 6y ago
      At least in the case of MongoDB, yes. Listening on all interfaces and not having a password set.
• steffan 6y ago
  If you're using MongoDB Atlas, you can allow connections only from a specific subnet. Also, you should of course set a password or use x.509 certs. If you're hosting your own DB on a cloud provider, connect using a VPC / Heroku's Private Space Peering to keep your database off of the internet.
• EE84M3i 6y ago
  What does a static IP have to do with this?