Hi, i got a one click MongoDB droplet and i want to connect it to another Debian droplet with installed Node.

To secure MongoDB i followed this tutorial:

https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-mongodb-on-ubuntu-16-04

Reaching this point Step 1 — Enabling UFW since into my Mongo droplet i have ufw with preallowed 3 ports for ipv4 and 3 ipv6 22 - 80 - 443 i have to disable them all and follow along with the tutorial the 80 443 have to be open.

As far as i know port 22 must be open so i can access into it, so i don’t have to allow openSSH since is already open right?

For security reasons i just have to create a tunnel using this command:

ssh -L 4321:localhost:27017 use_your_username@use_your_droplet_ip -f -N

and permit only ssh and closing https and http ports to connect to my node droplet? it’s secure enough?