Securely self host ESPOCRM

[jarvistucker]

Hi Selfhosted community, for my small business, I want to securely self host espocrm. I’ve selfhosted a few applications for fun but this will be my first serious project. I will have my customer data which I want backed up and secure. I have followed installation steps on a ec2 micro server and the application is working fine, but I’m totally confused about security and backup.

I’ve looked into DevSec hardening but it has me confused and I don’t have the time to learn the knitty gritty. For backup, I’m looking into Borg.

I’d appreciate any recommendations the community has.

[shalmaxb]

Hi,
for your installation I recommend 2 Factor Authentication, which is built in into espoCRM.

For Backup:

You need a working backup of your MySQL database
You must also backup following folders:

- data
- custom
- client/custom

I always have at least two backups in two different locations and always the last three backups saved. One complete backup should be outside of your house/office, in a cloud for example.

Change all passwords from time to time (FTP, MySQL and espoCRM) and also test a backup from time to time, if it is working.

And never forget: there is no 100% security. But you can achieve perhaps 99%.

If you consider Borg as your backup program, have a look into borgmatic as well: https://wiki.archlinux.org/title/Borgmatic