Firewall
Every server DotDeployer provisions is firewalled by default: only the ports a running site needs are open, and database ports are never open to the internet at all.
Default rules: SSH, HTTP and HTTPS are open; everything else is closed, including PostgreSQL and SQL Server. Connecting to a database from your laptop goes over an SSH tunnel instead — see Databases (PostgreSQL) or Databases (SQL Server).
Opening a port to one IP: if you need direct access to a port — your own IP connecting straight to a database, for example, instead of through a tunnel — the server’s Firewall tab lets you open a specific port to a specific IP address. Nothing is opened to the internet at large.
Steps:
- Open the server from Servers, go to its Firewall tab.
- Add a rule: the port and the single IP address allowed to reach it.
- Remove the rule the same way once you no longer need it.
Why this shape: DotDeployer’s default posture is that a database port is never open to the internet, full stop — the per-IP rule exists for the cases where you’ve decided the trade-off is worth it, not as the normal way to connect.
