2 ms·
> I had the test database url commented out and the production one was not. I feel like this is a giant red flag. Why on earth is your production database acce
by stephenr 2y ago
> I had the test database url commented out and the production one was not.
I feel like this is a giant red flag. Why on earth is your production database accessible from anywhere (ie your PC) without some kind of extra layer of security like a VPN or SSH tunnel?
- mattrighetti 2y agoThe production database that I'm talking about is a Postgres instance that is only available to me in my house for my side projects, it contains random stuff that can be queried through APIs that me and my family use with an app that works only when we are connected to our home LAN. Therefore I'm not paying as much attention when I do stuff with it as I would on a database that thousands of users rely on. Still, it sucks because it took quite some time to bring it back to a working state. Lesson learned