5 ms·

How do I know if my access control is just local? I have a few small (pet) mongoDB projects on Digital Ocean, never spend too much time updatng and/or securing

• jwklemm 12y ago
  I'd first make sure that MongoDB is locked down in your firewall. Only open port 27017 to the IPs that need it (app, secondaries, etc). I've found Mongo's authorization setup to be pretty unintuitive, but you can find some information here: http://docs.mongodb.org/manual/core/authorization/ http://docs.mongodb.org/manual/core/authorization/ (IIRC, you need to setup the permissions first, then set "auth=true" in mongod.conf and restart the service.)
• patio11 12y ago
  Assuming you have the mongo client installed on your laptop or similar, use this in a command shell: > mongo server.address.or.ip.goes.here If this connects successfully, that is problematic.