Mongodb-安全配置优化

1.MongoDB配置文件样例

# mongod.conf, Percona Server for MongoDB
# for documentation of all options, see:
#   http://docs.mongo.org/manual/reference/configuration-options/

# Where and how to store data.
storage:
  dbPath: /opt/mongo/mongo_data/　　#数据文件位置
  journal:
    enabled: true
  engine: wiredTiger　　#使用wiredTiger存储引擎

# Storage engine various options
#  More info for wiredTiger: https://docs.mongo.com/v3.4/reference/configuration-options/#storage-wiredtiger-options
#  wiredTiger:
#    engineConfig:
#      cacheSizeGB:
#      checkpointSizeMB:
#      statisticsLogDelaySecs:
#      journalCompressor: snappy
#      directoryForIndexes: false
#    collectionConfig:
#      blockCompressor: snappy
#    indexConfig:
#      prefixCompression: true

# Two options below can be used for wiredTiger and inMemory storage engines
#setParameter:
#    wiredTigerConcurrentReadTransactions:
#    wiredTigerConcurrentWriteTransactions: 

# where to write logging data.
systemLog:
 destination: file
 logAppend: true
 path: /opt/mongo/mongo_log/mongod.log　　#定义日志文件位置

processManagement:
  fork: true
  pidFilePath: /opt/mongo/mongo_log/mongod.pid　　#定义pid位置

# network interfaces
net:
  port:
  bindIp: 10.140.0.4　　#监听IP
  http:
    JSONPEnabled: false　　#关闭jsonp调用
    RESTInterfaceEnabled: false　　#关闭reset

security:
  authorization: enabled　　#开启数据库认证

#operationProfiling:

#replication:

#sharding:

## Enterprise-Only Options:

#auditLog:

#snmp: