# Security

When you deploy molgenis to a server, the server's firewall will shield the services from unauthorized access.

When you're running on a development machine, you'll want to disallow access to the database and ElasticSearch index you are running to non-localhost clients.

## ElasticSearch

Provide the following configuration items as Runtime Properties when running from your IDE tomcat or when running integration tests in maven:

```
-Des.discovery.zen.ping.multicast.enabled=false -Des.network.host=localhost
```

## Firewall settings

If your firewall settings are based on the executables you run, instead on ports you open/close:

Disallow java, and postgres to open incoming connections in your firewall.

### macbook

On macbook, you can do this as follows

* Apple, System preferences, Security and privacy,
  * FileVault -> turn it on!
  * Firewall -> turn it on, go to Firewall options
    * Java processes, all of them -> Block incoming connections
    * postgres -> Block incoming connections
    * Automatically allow signed software to receive incoming connections -> uncheck