How to Install, Configure, Secure MongoDB on Ubuntu 16.04 LTS

MongoDB is a modern, lightweight, scalable NoSQL Database. MongoDB stores data as JSON-like documents and data structure can be changed over time. These are few points which makes MongoDB great choice for wider usage in data sciences to mobile application. Server with 512 MB RAM server is enough for basic testing purpose. Here is step by step guide on how to install, configure, secure MongoDB from SSH. For this guide, we are using Ubuntu 16.04 LTS as server operating system.

 

How to Install, Configure, Secure MongoDB

 

SSH to the intended server and become root. In case it is public server for long term use, definitely you should follow some steps like we described before in this article to secure the server.

First update, upgrade the instance :

We have to add the key as next step :

You’ll get this kind of correct response :

Next, we will add the repository at /etc/apt/sources.list.d/ with one line command :

Run update :

Install MongoDB :

We are installing community edition of MongoDB. MongoDB repository contains the following packages:

mongodb-org Is a metapackage that will automatically install the four component packages listed below.
mongodb-org-server Contains the mongod daemon and associated configuration and init scripts.
mongodb-org-mongos Contains the mongos daemon.
mongodb-org-shell Contains the mongo shell.
mongodb-org-tools Contains the following MongoDB tools: mongoimport bsondump, mongodump, mongoexport, mongofiles, mongooplog, mongoperf, mongorestore, mongostat, and mongotop.

Run these two commands to check MongoDB started, running and enable on reboot :

If we run the command :

It starts MongoDB shell. If we run :

on that interface, we will become admin with this output :

To create the user admin with password admin123 as admin run this :

Run :

to exit. Now open /lib/systemd/system/mongod.service file :

Find the keyword ExecStart=. You’ll get the default line as :

Change it to :

Save the file. Now, open this file :

Find the keyword #security. Add this line at that place :

Run :

Now, if we run the command :

It will not refuse. But, if you run command like show dbs, it will refuse with this kind of error :

To correctly login, we have to use this kind of command :

Now if you run show dbs, you’ll get some valid response like :

Run a cat on the settings file :

You’ll notice lines like :

You can add IP of the current server beside 127.0.0.1 against bindIp separated with a comma. As my test server’s IP is 96.126.101.36, the config will be :

Run :

now, we can login with this kind of command :

MongoDB supports TLS/SSL to encrypt all of MongoDB’s network traffic ensuring that MongoDB network traffic is only readable by the intended client. Normally we do not use TLS/SSL to avoid complexity.

To configure TLS/SSL go to :

Generate a self-signed certificate with 365 days validity :

Above operation generates a new, self-signed certificate with no passphrase. Once you have the certificate, concatenate the certificate and private key to a .pem file:

Again, open this file we opened before :

We only had :

We can add more settings :

Save the file. Run :

You’ll get detailed information on SSL/TLS configuration and also commands to login :