Risk on using VPS

Hello elastic team. I am using elastic search 1.7 version in a linux VPS with the default configuration. I downloaded the tar file and ran it in my server. Can there any risk of using like this ?

There's always a risk in running anything in the cloud.

Do you have a firewall in place?

Yes, we cannot access servername:9200 from the internet. What if I added the config network.host: 127.0.0.1 ?

That's a good idea as well.

If you want further security I'd encourage you to look at Shield as well.

Thanks you for the support.