From 28d2d8a0da8b624d0a256ac492afe7605fa8d260 Mon Sep 17 00:00:00 2001
From: Sacha Chua <sacha@sachachua.com>
Date: Wed, 12 Oct 2022 20:28:41 -0400
Subject: Be able to deploy pad to live0

---
 pad/tasks/mariadb.yml | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

(limited to 'pad/tasks/mariadb.yml')

diff --git a/pad/tasks/mariadb.yml b/pad/tasks/mariadb.yml
index 7a406c9..8e613b6 100644
--- a/pad/tasks/mariadb.yml
+++ b/pad/tasks/mariadb.yml
@@ -5,10 +5,30 @@
       - mariadb-server
       - mariadb-client
       - python3-mysqldb
+- name: Ensure anonymous users are not in the database
+  mysql_user:
+    name: ""
+    host: "{{ item }}"
+    state: absent
+  with_items:
+    - localhost
+    - 127.0.0.1
+    - ::1
+    - "%"
+- name: Ensure mysql is configured to bind only to localhost
+  ini_file:
+    dest: /etc/mysql/my.cnf
+    section: mysqld
+    option: "bind-address"
+    value: "127.0.0.1"
 - name: Start MariaDB
   service:
     name: mysql
-    state: started
+    state: restarted
+    enabled: yes
+    runlevel:
+      - 3
+      - 5
 - name: Ensure emacsconf-pad database exists
   mysql_db:
     name: "{{ etherpad_database_name }}"
-- 
cgit v1.2.3