22 lines
819 B
Django/Jinja
22 lines
819 B
Django/Jinja
{% if mariadb_server_run_init_sql %}
|
|
# Run hardening steps from `mysql_secure_installation`
|
|
DELETE FROM mysql.global_priv WHERE User='';
|
|
DELETE FROM mysql.global_priv WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');
|
|
DROP DATABASE IF EXISTS test;
|
|
DELETE FROM mysql.db WHERE Db='test' OR Db='test\\_%';
|
|
|
|
UPDATE mysql.global_priv
|
|
SET priv=json_set(
|
|
priv,
|
|
'$.password_last_changed', UNIX_TIMESTAMP(),
|
|
'$.plugin', 'mysql_native_password',
|
|
'$.authentication_string', PASSWORD('{{ mariadb_server_root_password }}'),
|
|
'$.auth_or', json_array(json_object(), json_object('plugin', 'unix_socket'))
|
|
)
|
|
WHERE User='root';
|
|
|
|
FLUSH PRIVILEGES;
|
|
{% endif %}
|
|
{% if mariadb_server_run_custom_sql and mariadb_server_custom_sql|length %}
|
|
{{ mariadb_server_custom_sql }}
|
|
{% endif %}
|