mirror of https://github.com/parkervcp/eggs.git synced 2024-11-12 04:27:24 +08:00

History

MAXOUXAX 04dcb56d9b docs: updated MongoDB readme to add some notes about security		2022-10-29 15:01:47 +02:00
..
egg-mongo-d-b6.json	fix: mongodb config file is now automatically enabling access control by default	2022-10-29 14:45:19 +02:00
egg-mongo-d-b.json	remove default value of Mongo admin password	2022-10-01 11:36:17 +02:00
README.md	docs: updated MongoDB readme to add some notes about security	2022-10-29 15:01:47 +02:00

README.md

MongoDB

From their Website

MongoDB is a general purpose, document-based, distributed database built for modern application developers and for the cloud era.

MongoDB free monitoring.

To disable the message about free monitoring you can run db.disableFreeMonitoring().

Security

By default, MongoDB does not enforce access control, meaning that even if you set an admin username and password in the settings of your Pterodactyl server, anyone will be able to connect to the database without authentication, and perform any operation.

⚠️ This is why we recommend to expose your MongoDB database only to your local network, if possible

Notes specific to the MongoDB 6 egg

The MongoDB 6 egg enables access control by default in the mongod.conf file, meaning that even if people will be able to connect to your database as guests, they will not be able to perform any operation, apart from nonhazardous commands

⚠️ If you know what you are doing, and you really want to disable access control, you can do so by editing the `mongod.conf` file

security:
  authorization: "disabled"

To learn more about MongoDB security, you can read the MongoDB Security Checklist

Minimum RAM warning

MongoDB requires approximately 1GB of RAM per 100.000 assets. If the system has to start swapping memory to disk, this will have a severely negative impact on performance, and should be avoided.

Server Ports

Ports required to run the server in a table format.

Port	default
Server	27017