<story><title>PostgreSQL beginner guide</title><url>https://knowledgepill.it/posts/postgresql-basics-guide/</url></story><parent_chain></parent_chain><comment><author>2mol</author><text>So this is cool, and can serve as a good cheatsheet for beginners.&lt;p&gt;However, the question where I struggled the most: how the hell do I set up a secure Postgres instance on some cloud VM or server? (I _really_ love those 2.50 bucks per month instances)&lt;p&gt;I spent a fair amount of time reading up on it, but it&amp;#x27;s still really easy to make a mistake in your `pg_hba.conf` or somehwere else. I remember disabling password based login, and just authenticating over SSH, and my server still got compromised after a day or two. 100% my fault - I think it was related to `COPY FROM&amp;#x2F;TO` being able to run arbitrary commands because I didn&amp;#x27;t understand that `postgres` is regarded as a superuser by the database.&lt;p&gt;I&amp;#x27;ve been using managed services like Heroku Postgres and RDS ever since.&lt;p&gt;Point is: it would be of huge value to have a clear (but complete) overview of how to configure a Postgres instance so that it&amp;#x27;s secure in the basic sense. If that isn&amp;#x27;t possible (or very hard) then please let&amp;#x27;s collectively tell beginners to just use managed instances.</text></comment>
<story><title>PostgreSQL beginner guide</title><url>https://knowledgepill.it/posts/postgresql-basics-guide/</url></story><parent_chain></parent_chain><comment><author>autotune</author><text>Can anyone recommend an “advanced” PG guide? I’m looking to learn all the ins and outs of Postgres.</text></comment>