From a8642a01570c27d27e64066c5db4ab3b16918886 Mon Sep 17 00:00:00 2001 From: David Dooling Date: Thu, 21 Dec 2023 12:26:37 -0600 Subject: [PATCH] mongo: add more security information More on docker-library/mongo#656. --- mongo/content.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mongo/content.md b/mongo/content.md index 6e1caa11f..eff926e1c 100644 --- a/mongo/content.md +++ b/mongo/content.md @@ -10,7 +10,7 @@ First developed by the software company 10gen (now MongoDB Inc.) in October 2007 # Security -By default Mongo's configuration requires no authentication for access, even for the administrative user. See the "`MONGO_INITDB_ROOT_USERNAME`, `MONGO_INITDB_ROOT_PASSWORD`" section below for information on how to begin securing Mongo and the [MongoDB Security documentation](https://www.mongodb.com/docs/manual/security/) for more detail. +By default Mongo's configuration requires no authentication for access, even for the administrative user. It is highly recommended to set a root user name and password if you plan on exposing your Mongo instance to the internet. See the "`MONGO_INITDB_ROOT_USERNAME`, `MONGO_INITDB_ROOT_PASSWORD`" section below for instructions and the [MongoDB Security documentation](https://www.mongodb.com/docs/manual/security/) for a more complete treatment. # How to use this image