docs: updated MongoDB readme to add some notes about security
This commit is contained in:
@@ -8,6 +8,25 @@ MongoDB is a general purpose, document-based, distributed database built for mod
|
|||||||
|
|
||||||
To disable the message about free monitoring you can run `db.disableFreeMonitoring()`.
|
To disable the message about free monitoring you can run `db.disableFreeMonitoring()`.
|
||||||
|
|
||||||
|
## Security
|
||||||
|
|
||||||
|
By default, MongoDB **does not enforce access control**, meaning that even if you set an admin username and password in the settings of your Pterodactyl server, **anyone will be able to connect to the database without authentication**, and perform any operation.
|
||||||
|
|
||||||
|
> :warning: This is why we recommend to expose your MongoDB database only to your local network, if possible
|
||||||
|
|
||||||
|
### Notes specific to the MongoDB 6 egg
|
||||||
|
|
||||||
|
The [MongoDB 6 egg](./egg-mongo-d-b6.json) enables access control by default in the `mongod.conf` file, meaning that even if people will be able to connect to your database as guests, [they will not be able to perform any operation, apart from nonhazardous commands](https://dba.stackexchange.com/a/292175)
|
||||||
|
|
||||||
|
### :warning: If you know what you are doing, and you really want to disable access control, you can do so by editing the `mongod.conf` file
|
||||||
|
|
||||||
|
```yaml
|
||||||
|
security:
|
||||||
|
authorization: "disabled"
|
||||||
|
```
|
||||||
|
|
||||||
|
> To learn more about MongoDB security, you can read the [MongoDB Security Checklist](https://www.mongodb.com/docs/manual/administration/security-checklist/#security-checklist)
|
||||||
|
|
||||||
## Minimum RAM warning
|
## Minimum RAM warning
|
||||||
|
|
||||||
MongoDB requires approximately 1GB of RAM per 100.000 assets. If the system has to start swapping memory to disk, this will have a severely negative impact on performance, and should be avoided.
|
MongoDB requires approximately 1GB of RAM per 100.000 assets. If the system has to start swapping memory to disk, this will have a severely negative impact on performance, and should be avoided.
|
||||||
|
|||||||
Reference in New Issue
Block a user