I want to start hosting my hidden service and be as secure as possible.
It is currently just some PHP Code and a MySQL database. Now I am wondering if I need a external server to host my database or if I should host the database on the same server the webserver is running.
So if my webserver gets compromised the hackers do not have access to my database and if would that protect me at all, since i have to store the credentials from the database somewhere.
Thanks for your help.