From e47ce2ba41b46b45c2c0a2ed6766a3eac94053e5 Mon Sep 17 00:00:00 2001 From: Mitch Riedstra Date: Sun, 20 Oct 2019 08:32:24 -0400 Subject: Add some more documentation on a secure production setup --- defaults/main.yml | 2 +- readme.md | 5 +++++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/defaults/main.yml b/defaults/main.yml index 53e1ee9..f22d229 100644 --- a/defaults/main.yml +++ b/defaults/main.yml @@ -7,7 +7,7 @@ mariadb_opts: | datadir = /var/mysql innodb_buffer_pool_size = 128M max_allowed_packet = 16M - + # Disabling symbolic-links is recommended to prevent assorted security risks symbolic-links=0 diff --git a/readme.md b/readme.md index cab4860..a842a3d 100644 --- a/readme.md +++ b/readme.md @@ -3,3 +3,8 @@ Somewhat similar to the Postgresql role I created. Should be pretty easy to adapt to other distributions if you wish. + + +You'll probably want to run `mysql_secure_installation` on the server +and then set `mariadb_root_passwd` in the vars if you're using this in +production. -- cgit v1.2.3