What about database in a local environment?

Don’t keep your database open to internet. Only your app should be able to access that machine. keep app sever behind firewall(AWS gives many options) and web server will be a single point of entry to your application.

P.S. I am no expert, this is what I think might improve the security.