diff options
| author | Mitch Riedstra <mitch@riedstra.us> | 2019-10-20 08:32:24 -0400 |
|---|---|---|
| committer | Mitch Riedstra <mitch@riedstra.us> | 2019-10-20 08:32:24 -0400 |
| commit | e47ce2ba41b46b45c2c0a2ed6766a3eac94053e5 (patch) | |
| tree | 518c42cfe00f921afb92dec1ca05f1cac9f0f4d8 | |
| parent | acc2965258fb85aca1faf92ea8b65a25f964c8fa (diff) | |
| download | alpine-mysql-e47ce2ba41b46b45c2c0a2ed6766a3eac94053e5.tar.gz alpine-mysql-e47ce2ba41b46b45c2c0a2ed6766a3eac94053e5.tar.xz | |
Add some more documentation on a secure production setup
| -rw-r--r-- | defaults/main.yml | 2 | ||||
| -rw-r--r-- | readme.md | 5 |
2 files changed, 6 insertions, 1 deletions
diff --git a/defaults/main.yml b/defaults/main.yml index 53e1ee9..f22d229 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -7,7 +7,7 @@ mariadb_opts: | datadir = /var/mysql innodb_buffer_pool_size = 128M max_allowed_packet = 16M - + # Disabling symbolic-links is recommended to prevent assorted security risks symbolic-links=0 @@ -3,3 +3,8 @@ Somewhat similar to the Postgresql role I created. Should be pretty easy to adapt to other distributions if you wish. + + +You'll probably want to run `mysql_secure_installation` on the server +and then set `mariadb_root_passwd` in the vars if you're using this in +production. |