@sribe as far as I can see, (Please prove me wrong!) in above configuration, RabbitMQ is only open for encrypted access from the outside world (it is open for unecrypted access from localhost). The thing that client certificates would add is to make it impossible for man-in-the-middle attacks to occur, which can still happen in a system that uses TLS encryption.
Qqwy
TypeCheck Core Team
sribe
Perhaps I misunderstood, do you need to access RMQ from the outside world? Or are you just directing internal traffic to your gateway?
0
Qqwy
TypeCheck Core Team
Ah! Good question; I need to make this more clear in the guide:
In our case, we have one ‘coordination server’ running Ruby, and another server (and there might be multiple of these in the future) ‘consumer servers’ running Elixir. RabbitMQ runs on the ‘coordination server’, but the Elixir servers will connect to this one remotely (And some of these might at some point be at different geographical locations).
But of course, these are trusted servers also operated by me and my colleagues; not ‘just anyone’ from the outside world. 
0
maz
funtimes
Qqwy
TypeCheck Core Team
As far as I can remember, I did not have to install it separately. But that might very well depend on which operating system (and i.e. which package manager) your VPS is running.
0