In the /docs/ directory of your installation. Look for the Security Recommendations.