Showing 19 Result(s)

Ngnix Installation on Ubuntu or CentOS/RHEL Server

Ubuntu Nginx is available with default Ubuntu Repositories. So simple install it using the following command, $ sudo apt-get update && sudo apt-get install nginx CentOS/RHEL Since Nginx is available with default RHEL/CentOS repositories, we either need to enable official Nginx repository or Epel repository Nginx Repository To enable Nginx repository, create a file named Read More

HTTPS Everywhere

The HTTP/2 specification was published as RFC 7540 in May 2015, which means at this point it’s a part of the standard. This was a major milestone. Now we can all upgrade our servers to use HTTP/2. One of the most important aspects is the backwards compatibility with HTTP 1.1 and the negotiation mechanism to Read More

How to Use SSL/TLS with Node.js

In this article, I’ll work through a practical example of how to add a Let’s Encrypt-generated certificate to your Express.js server. But protecting our sites and apps with HTTPS isn’t enough. We should also demand encrypted connections from the servers we’re talking to. We’ll see that possibilities exist to activate the SSL/TLS layer even if it Read More

MongoDB Security Checklist

Enable Access Control and Enforce Authentication Enable access control and specify the authentication mechanism. You can use the default MongoDB authentication mechanism or an existing external framework. Authentication requires that all clients and servers provide valid credentials before they can connect to the system. In clustered deployments, enable authentication for each MongoDB server. See Authentication and Enable Auth. Read More

MongoDB Security

MongoDB provides various features, such as authentication, access control, encryption, to secure your MongoDB deployments. Some key security features include: Authentication Authorization TLS/SSL Authentication Role-Based Access Control TLS/SSL (Transport Encryption) SCRAM Enable Access Control Configure mongod and  mongos for TLS/SSL x.509 Manage Users and Roles TLS/SSL Configuration for Clients Enterprise Only Encryption Kerberos Authentication Client-Side Field Level Encryption Read More