Best Practices for LedgerSMB Security

[Roland Porth <..hidden..>]

I have been following the discussion regarding the LedgerSMB security/schema upgrades to resolve long-lingering SQL-Ledger security and reliability issues.  The effort and progress you and the LedgerSMB team have made is most impressive.  Thank you all!

I am starting to setup LedgerSMB for my small business.   With regards to data Security, could you please summarize your current recommended "Best Practices" regarding setting up LedgerSMB in an installation requiring remote access via the internet.

Including the various levels:

1. Server configuration (debian)
2. Apache 2 configuration
3. SSL configuration
4. PostgreSQL 8.x configuration
5. LedgerSMB configuration

Thanks again,

Roland