Skip to content

Commit 5655aff

Browse files
committed
Only make replication an explicit choice
In most cases we dont do replication and this book will let SQL bind to 0.0.0.0 which is less secure and only relevant when making use of the replication.
1 parent 9fe5a80 commit 5655aff

File tree

2 files changed

+2
-1
lines changed

2 files changed

+2
-1
lines changed

provision-contest/ansible/domserver.yml

+1
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,7 @@
3434
tags: domserver
3535
- role: mysql_replication
3636
tags: mysql_replication
37+
when: REPLICATION_PASSWORD is defined
3738
- role: keepalived
3839
tags: keepalived
3940
when: KEEPALIVED_PRIORITY is defined

provision-contest/ansible/group_vars/all/secret.yml.example

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Password for the MySQL replication user.
22
# Set this to enable master-master replication between two domservers.
3-
REPLICATION_PASSWORD: some-replication-password
3+
#REPLICATION_PASSWORD: some-replication-password
44

55
# Database user password.
66
DB_PASSWORD: some-database-password

0 commit comments

Comments
 (0)