Dynamic IPs and Trusted Sources

Hello there!

Great question, and it’s a common challenge for developers working with dynamic IP addresses, especially when securing access to your databases. Let’s explore a couple of solutions to make your life easier!

Using a VPN

A very effective way to bypass the dynamic IP issue is to use a VPN. This approach allows you to maintain a consistent IP address for your development environment, regardless of changes by your ISP. DigitalOcean’s Marketplace offers a solution called Pi-hole + OpenVPN, which you can set up with a single click. This not only helps with secure and private browsing but can also simplify your access management to MongoDB by having a static IP.

Check out the Pi-hole + OpenVPN on DigitalOcean’s Marketplace here: Pi-hole VPN.

Automating with doctl

For your idea of automating the update of your trusted sources rules, doctl is indeed a powerful tool in your arsenal. Here’s a basic example of how you could use doctl to update your firewall rules, specifically for managing access to your MongoDB database:

1. Install doctl: First, ensure you have doctl installed. You can find the installation instructions on the DigitalOcean documentation.

2. Authenticate doctl: Make sure you’ve authenticated doctl with your DigitalOcean account. You’ll typically do this with an API token:

   doctl auth init
   

3. Script for Updating your Rules: You can write a simple script that fetches your current IP and updates the trusted sources rule. Here’s a very basic example:

#!/bin/bash

# Fetch your current public IP
MY_IP=$(curl -s https://ifconfig.io/)

# Specify your managed database ID
DATABASE_ID="your-database-id"

# Update the database firewall rules (trusted sources)
# Note: Adjust --uuid with your actual DATABASE_ID and --rule with the appropriate IP
doctl databases firewalls update $DATABASE_ID --rule type:ip, value:$MY_IP --force

echo "Database trusted sources rules updated to allow access from $MY_IP"

For more information you can check out the docs here:

https://docs.digitalocean.com/reference/doctl/reference/databases/firewalls/list/

I would personally go for using a VPN with a static IP simplifies access management without needing to adjust firewall rules constantly. However, automating updates with doctl provides a flexible, immediate solution as well. Depending on your workflow and security requirements, you might find one option more suitable than the other.

Happy coding, and stay secure!

Best,

Bobby