awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

misc: some more updates in examples

Browse Source
This commit is contained in:
Sheen Capadngan
2025-06-17 20:25:38 +08:00
parent 23aa97feff
commit 3d76ae3399
1 changed files with 10 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
docs/self-hosting/guides/production-hardening.mdx
View File

@@ -337,18 +337,18 @@ spec:
port: 6379
```
**Infrastructure firewall considerations**. In addition to the universal host firewalls, implement cloud-level security:
**Infrastructure firewall considerations**. In addition to the universal host firewalls, implement infrastructure-level security:
```bash
# Example: AWS Security Groups, Azure NSGs, or GCP Firewall Rules
# Allow ingress from load balancer to NodePort/ClusterIP service
# Allow egress to managed databases
# Block all other traffic
For cloud deployments (AWS Security Groups, Azure NSGs, or GCP Firewall Rules):
# For on-premises, ensure node-level firewalls allow:
# - Ingress traffic from ingress controllers
# - Egress traffic to external services (databases, SMTP)
```
- Allow ingress from load balancer to NodePort/ClusterIP service
- Allow egress to managed databases
- Block all other traffic
For on-premises deployments, ensure node-level firewalls allow:
- Ingress traffic from ingress controllers
- Egress traffic to external services (databases, SMTP)
#### Access Control