This may not be a great site for this question. I basically have approximately 10 VPS instances running a secured website each, each with their own SSH connection to a hosted Database. What I'm looking to do is transfer these sites to a single server setup (minus loadbalancing, etc.), and have the sites be selected based on Virtual Host.
The network stack would be user > nginx > Passenger > Padrino, running on Ubuntu, with the usual security features, SELinux, fail2ban, denyhosts, ufw, tiger.
I've been trying to weight the pros and cons to this, and so far I'm at a loss, based on 2 key points:
- The system would be much easier to maintain, as I would have far fewer instances to keep up to date.
- If a breach does happen, it'll be a lot more catastrophic, as it will imply access to every hosted database, rather than a single one.
I can't tell if it's worth the risk, for the sake of saving time (Which I barely have) to keep it right.