openssl req -newkey rsa:2048 -new -x509 -days 3650 -nodes -subj '/C=US/ST=Massachusetts/L=Bedford/O=Personal/OU=Personal/[email protected]/CN=localhost' -out mongodb-cert.crt -keyout mongodb-cert.key
| ## Place this file in "/etc/sysctl.d/network-tuning.conf" and | |
| ## run "sysctl -p" to have the kernel pick the new settings up | |
| # Avoid a smurf attack | |
| net.ipv4.icmp_echo_ignore_broadcasts = 1 | |
| # Turn on protection for bad icmp error messages | |
| net.ipv4.icmp_ignore_bogus_error_responses = 1 | |
| # Turn on syncookies for SYN flood attack protection |
| FROM mysql | |
| ADD my.cnf /etc/mysql/my.cnf | |
| CMD ["mysqld", "--datadir=/var/lib/mysql", "--user=mysql"] |