Skip to content

Conversation

@tvdijen
Copy link
Contributor

@tvdijen tvdijen commented Oct 16, 2025

This disables legacy TLS-protocols and server-side javascript processing which is enabled by default.
Taken from CIS hardening guidelines for Mongo

This disables legacy TLS-protocols and server-side javascript processing which is enabled by default
@tvdijen
Copy link
Contributor Author

tvdijen commented Oct 16, 2025

To consider:

Add:

security:
  clusterIpSourceAllowlist:
    - 10.x.x.x/28

To restrict the clients that can communicate with the Mongo server.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants