From ArchServer Wiki

Default Configuration Goals

The default configuration of packages in ArchServer should adhere to the following guidelines where possible:

• Remote access to superuser accounts is never allowed (eg, root SSH login, root access in MySQL)
• Applications providing network services should liston on lo interface only (eg, 127.0.0.1)

Note: These are the suggested default settings only. The user is free (and expected) to change them to suit the users environment and requirements.