The first useful check
A small app and its database often share a VPS at first, but their connection path should still be explicit.
Inputs and prerequisites
Identify whether the database should accept only local connections, a private network path or another scoped client. Inventory existing clients before narrowing an interface.
A small, reversible procedure
Change one listener or access rule at a time, test the application path and retain a local recovery method. Do not expose a database solely to work around an unclear proxy or application configuration.
What to record after the check
Record the intended clients, bind address, authentication method and the application check that succeeded after the change.
Scope and service boundary
This does not assess every database engine, firewall rule or compliance requirement. Malaysia, Romania and Switzerland are server-country choices; they do not establish a backup country, facility detail, stock or measured network result.
Documentation used
Primary references for this page. Check the documentation for the version installed in your own environment.