I am planning a small Sitecore 9.0.2 + Sitecore Experience Commerce production deployment for a demo website with very low traffic. I do not have a lot of time to provision multiple servers, so I plan to use the XP0 topology: SQL Server, Solr, xConnect, Sitecore website, Sitecore Experience Commerce 9 services all on the same VM.
I have read that you should not use self-signed certificates in production. I completely understand why for the Sitecore website. To avoid trust warnings in the browser. I will have my own domain demoname.companyname.com and wildcard SSL certificate for *.companyname.com that I will use for the Sitecore website.
However, as everything else will be installed locally, can I use self signed certificates for the xConnect, solr, and commerce services? What are the potential security concerns?