You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
144 lines
3.9 KiB
Plaintext
144 lines
3.9 KiB
Plaintext
# For advice on how to change settings please see
|
|
# http://dev.mysql.com/doc/refman/8.0/en/server-configuration-defaults.html
|
|
#
|
|
############################################################
|
|
[mysqldump]
|
|
socket=/mysql/data/mysql.sock
|
|
|
|
|
|
[mysql]
|
|
socket=/mysql/data/mysql.sock
|
|
|
|
|
|
[mysqld]
|
|
#
|
|
############################################################
|
|
# Memory
|
|
############################################################
|
|
innodb_buffer_pool_size=2G
|
|
innodb_log_buffer_size=64M
|
|
tmp_table_size=64M
|
|
max_heap_table_size=64M
|
|
sort_buffer_size=4M
|
|
|
|
|
|
############################################################
|
|
# general
|
|
############################################################
|
|
datadir=/mysql/data
|
|
tmpdir=/tmp
|
|
socket=/mysql/data/mysql.sock
|
|
log-error=/var/log/mysqld.log
|
|
pid-file=/var/run/mysqld/mysqld.pid
|
|
character-set-server=utf8mb4
|
|
collation-server=utf8mb4_general_ci
|
|
user=mysql
|
|
local-infile=0
|
|
|
|
|
|
############################################################
|
|
# storage engine
|
|
############################################################
|
|
default_storage_engine=InnoDB
|
|
innodb_file_per_table=on
|
|
innodb_data_home_dir=/mysql/data
|
|
innodb_log_group_home_dir=/mysql/data
|
|
innodb_redo_log_capacity=4G
|
|
innodb_undo_directory=/mysql/data
|
|
#innodb_log_file_size=512M #deprecated
|
|
#innodb_log_files_in_group=2 #deprecated
|
|
#innodb_undo_tablespaces=3 #deprecated
|
|
innodb_undo_log_truncate=on
|
|
sync_binlog=1
|
|
early-plugin-load=keyring_file.so
|
|
keyring_file_data=/mysql/backup/keyring_file/keyring
|
|
default_table_encryption=on
|
|
table_encryption_privilege_check=on
|
|
innodb_redo_log_encrypt=on
|
|
innodb_undo_log_encrypt=on
|
|
block_encryption_mode=aes-256-cbc
|
|
|
|
|
|
############################################################
|
|
# connection
|
|
############################################################
|
|
max_connections=500
|
|
wait_timeout=28800
|
|
interactive_timeout=28800
|
|
port=12138
|
|
|
|
|
|
############################################################
|
|
# logon
|
|
############################################################
|
|
plugin-load-add=connection_control.so
|
|
connection-control=FORCE_PLUS_PERMANENT
|
|
connection-control-failed-login-attempts=FORCE_PLUS_PERMANENT
|
|
connection-control-failed-connections-threshold=5
|
|
connection-control-min-connection-delay=86400000
|
|
connection-control-max-connection-delay=86400000
|
|
|
|
plugin-load-add=validate_password.so
|
|
validate_password=FORCE_PLUS_PERMANENT
|
|
validate_password_length=13
|
|
validate_password_policy=1
|
|
validate_password_mixed_case_count=1
|
|
validate_password_number_count=1
|
|
validate_password_special_char_count=1
|
|
default_password_lifetime=90
|
|
|
|
plugin-load-add=auth_socket.so
|
|
auth_socket=FORCE_PLUS_PERMANENT
|
|
|
|
|
|
############################################################
|
|
# binlog
|
|
############################################################
|
|
log-bin=/mysql/backup/log/mysql-bin
|
|
log_bin_index=/mysql/backup/log/binlog.index
|
|
binlog_format=mixed
|
|
#expire_logs_days=7 #deprecated
|
|
binlog_expire_logs_seconds=604800
|
|
max_binlog_size=100M
|
|
binlog_encryption=on
|
|
|
|
|
|
|
|
############################################################
|
|
# auditing
|
|
############################################################
|
|
general_log=on
|
|
general_log_file=/mysql/backup/log/mysql.log
|
|
log_timestamps=system
|
|
long_query_time=10
|
|
slow_query_log=on
|
|
slow-query-log-file=/mysql/backup/log/slowquery.log
|
|
log-queries-not-using-indexes=on
|
|
|
|
|
|
############################################################
|
|
# ssl/tls
|
|
############################################################
|
|
ssl=on
|
|
ssl-ca=/etc/mysql/certs/ca-cert.pem
|
|
ssl-cert=/etc/mysql/certs/server-cert.pem
|
|
ssl-key=/etc/mysql/certs/server-key.pem
|
|
#require_secure_transport=on
|
|
|
|
|
|
############################################################
|
|
# replication
|
|
# Please comment this block if replication is not used.
|
|
# Caution:
|
|
# server_id should differ between source and replica
|
|
# read-only should be set dynamically and persistently
|
|
############################################################
|
|
server_id=1
|
|
relay-log=/mysql/backup/log/mysql-relay
|
|
max_binlog_size=500M
|
|
#read-only=0
|
|
|
|
|
|
############################################################
|
|
|