Once I somehow had an /etc/hosts that said something like 127.0.0.1 localhost 192.168.1.8 localhost Consequently Postgres was binding to the external

Once I somehow had an /etc/hosts that said something like 127.0.0.1 localhost 192.168.1.8 localhost Consequently Postgres was binding to the external IP when it should have been listening on just 127.0.0.1. I only noticed it because I routinely nmap my servers after setting them up. In this case it probably didn't matter, since login would have still required a password, but it's one example of how easily misconfiguration can open holes. Not nearly as bad as Mongo's situation, but a lesson to me to check my work.