Securing VueJS App and MariaDB Database on Droplet

Question

I have a VueJS web app that uses MariaDB for database. I have had this running fine on my droplet, without HTTPS, and I added SSL using Let’s Encrypt. The app continued to work for awhile, but then stopped for some reason, apparently a bug in the code (I didn’t change the code). In any event I have been working on getting it back up and running.

I realize now that the easy SSL process I used did not update MariaDB for using SSL, so I started looking at that. This looks like a very involved procedure that I’m not currently ready to tackle.

I am considering various options for the current alpha release of the app, which include:

Remove SSL from the whole app
Leave SSL on for the VueJS and back end, and move Mariadb to a separate host that doesn’t have SSL.
same as 2 except engage with MariaDB hosting service that provides SSL as part of the hosting.

problem with this would be new complexity in configuring the web app as a MariaDB client that has SSL enabled.

???

Obviously I am not an expert in this SSL topic…

I am looking for advice. My priorities:

Try to get a secured stack if practical, considering…
As my focus is ongoing development during a lengthy alpha phase, avoid incurring a lot of IT management overhead in keeping complex deployment structure up and running.
Keep costs down until beta and production releases.

Through the alpha phase I will learn much more about deployment and DevOps, and become much more knowledgeable about managing a fully secured and performant web app.

Thanks much. So far I am very pleased with Digital Ocean!

Stephen

KFSys · Answer

Securing your Vue.js application and MariaDB database on a Digital Ocean droplet involves several steps, balancing security, manageability, and cost. Here are some strategies that align with your priorities: Simplified Deployment Docker Compose : Use Docker Compose to manage your Vue.js and MariaDB services. Docker will help encapsulate your environment and dependencies, making it easier to move from development to production without significant changes. Managed Database : Consider using Digital Ocean’s Managed Databases for MariaDB when you move to beta/production. This takes away much of the overhead of managing the database server. Security HTTPS : Use Let’s Encrypt to obtain a free SSL certificate and ensure all communication is over HTTPS. Firewall : Utilize Digital Ocean’s cloud firewalls to restrict access to your droplet. Only allow SSH (port 22), HTTP (port 80), and HTTPS (port 443). SSH Keys : Use SSH keys instead of passwords for server login to reduce the risk of brute-force attacks. Database Security : Ensure MariaDB is not accessible from outside your droplet. Use strong passwords and consider using database user privileges wisely. Regular Updates : Keep your server’s software updated with the latest security patches. Enable unattended-upgrades for automatic security updates. Backups : Use Digital Ocean’s backup service to regularly back up your droplet. Performance Nginx : Use Nginx as a reverse proxy for your Vue.js app. Nginx is efficient and can help with load balancing if you scale up later. Caching : Implement caching strategies within your app to reduce database load. Cost-Effective Strategies Scale with Demand : Start with a small droplet and scale up as your needs grow. Monitor your usage and only scale when necessary. Monitoring : Use Digital Ocean’s built-in monitoring tools to keep track of your droplet’s performance and adjust resources accordingly. Deals & Credits : Look out for any promotions, credits, or referral programs Digital Ocean might offer to reduce costs. Learning DevOps Community & Tutorials : Utilize Digital Ocean’s extensive community tutorials to learn about deployment and DevOps. Version Control : Use Git for version control and integrate your repository with CI/CD pipelines for automated testing and deployment. Infrastructure as Code : Familiarize yourself with tools like Terraform to manage your infrastructure as code, which is beneficial for maintaining and scaling your application’s infrastructure. Remember, security and performance are ongoing tasks. As you learn and your application grows, you’ll find more ways to improve and streamline your deployment process. Digital Ocean has an active community and plenty of resources, so make use of those as you progress through your development phases.

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

Securing VueJS App and MariaDB Database on Droplet

Related questions

PHP Critical Vulnerabilities upgrade dd 21 Oktober 2026

Abuse report ticket 12854899 submitted Sept 29, still no response

Digital Ocean Team SSO with Entra ID - Work Around?

Post-Incident Security Validation: Rebuild or Trust the Existing Droplet

Best way to securely access a homelab remotely without relying only on Tailscale?

VLESS VPN connects but no traffic passes through (DigitalOcean VPS + x-ui + Xray)

What’s the status of CopyFail patches in shared hosts?

How are you handling the Axios supply chain attack in your deployments?

Keeps signing me out (even more frequently than before)

What’s the best way to secure a DigitalOcean Droplet running WordPress against brute-force attacks?

prevent firewall ssh lock out

how do I find my droplet's username and password?

Report this

Securing VueJS App and MariaDB Database on Droplet

Related questions

PHP Critical Vulnerabilities upgrade dd 21 Oktober 2026

Abuse report ticket 12854899 submitted Sept 29, still no response

Digital Ocean Team SSO with Entra ID - Work Around?

Post-Incident Security Validation: Rebuild or Trust the Existing Droplet

Best way to securely access a homelab remotely without relying only on Tailscale?

VLESS VPN connects but no traffic passes through (DigitalOcean VPS + x-ui + Xray)

What’s the status of CopyFail patches in shared hosts?

How are you handling the Axios supply chain attack in your deployments?

Keeps signing me out (even more frequently than before)

What’s the best way to secure a DigitalOcean Droplet running WordPress against brute-force attacks?

prevent firewall ssh lock out

how do I find my droplet's username and password?