在CentOS上为MongoDB设置安全性的步骤如下:
/etc/mongod.conf
。security:
authorization: enabled
sudo systemctl restart mongod
mongo
admin
数据库:use admin
db.createUser({
user: "admin",
pwd: "your_strong_password",
roles: [ { role: "userAdminAnyDatabase", db: "admin" } ]
})
db.grantRolesToUser("admin", [ { role: "userAdminAnyDatabase", db: "admin" } ])
use your_database
db.createUser({
user: "your_username",
pwd: "your_password",
roles: [ { role: "readWrite", db: "your_database" } ]
})
db.grantRolesToUser("your_username", [ { role: "readWrite", db: "your_database" } ])
firewalld
配置防火墙规则,只允许本地访问MongoDB端口(默认是27017):sudo firewall-cmd --permanent --zone=public --add-port=27017/tcp
sudo firewall-cmd --reload
bindIp
:net:
bindIp: 127.0.0.1
通过以上步骤,您可以大大提高CentOS上MongoDB的安全性。请记住,定期更新密码和策略是保护数据库的关键部分。
辰迅云「云服务器」,即开即用、新一代英特尔至强铂金CPU、三副本存储NVMe SSD云盘,价格低至29元/月。点击查看>>
推荐阅读: centos中lsnrctl配置文件在哪