Secure your LA infrastructure

Basic mesures

Draft

Allow basic input traffic 22/80/443 from the outside. Restrict external access to solr web interface.

If you want to add restring the internal traffic is more complex. Initially you can open all ports between your VMs and internal IP address as a start while you discover which ports use each services and adapt it to your infrastructure.

Use fail2ban for prevent brute force in those services (http and ssh authentication).

Other resources:

• Basic Auth in your LA node without CAS