extern/zabbix-docker
1
0
Fork 0
mirror of https://github.com/zabbix/zabbix-docker.git synced 2025-05-01 06:34:35 +02:00
Code Issues Packages Projects Releases Wiki Activity

Removed MySQL root secret for server and proxy containers

Browse Source
This commit is contained in:
Alexey Pustovalov 2024-01-19 01:13:10 +09:00
parent bf8b26a5d8
commit 1d8a654840
5 changed files with 7 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
compose_databases.yaml
View File

@ -7,6 +7,7 @@ services:
- --character-set-server=utf8 - --character-set-server=utf8
- --collation-server=utf8_bin - --collation-server=utf8_bin
- --default-authentication-plugin=mysql_native_password - --default-authentication-plugin=mysql_native_password
# Use TLS encryption for connections to database
# - --require-secure-transport # - --require-secure-transport
# - --ssl-ca=/run/secrets/root-ca.pem # - --ssl-ca=/run/secrets/root-ca.pem
# - --ssl-cert=/run/secrets/server-cert.pem # - --ssl-cert=/run/secrets/server-cert.pem
@ -14,9 +15,12 @@ services:
restart: "${RESTART_POLICY}" restart: "${RESTART_POLICY}"
volumes: volumes:
- ${DATA_DIRECTORY}/var/lib/mysql:/var/lib/mysql:rw - ${DATA_DIRECTORY}/var/lib/mysql:/var/lib/mysql:rw
- ${ENV_VARS_DIRECTORY}/mysql_init/init_proxy_db.sql:/docker-entrypoint-initdb.d/mysql_init_proxy.sql:ro
# - dbsocket:/var/run/mysqld/ # - dbsocket:/var/run/mysqld/
env_file: env_file:
- ${ENV_VARS_DIRECTORY}/.env_db_mysql - ${ENV_VARS_DIRECTORY}/.env_db_mysql
environment:
- MYSQL_ROOT_PASSWORD_FILE=/run/secrets/MYSQL_ROOT_PASSWORD
secrets: secrets:
- MYSQL_USER - MYSQL_USER
- MYSQL_PASSWORD - MYSQL_PASSWORD

4
compose_zabbix_components.yaml
View File

@ -65,8 +65,6 @@ services:
secrets: secrets:
- MYSQL_USER - MYSQL_USER
- MYSQL_PASSWORD - MYSQL_PASSWORD
- MYSQL_ROOT_USER
- MYSQL_ROOT_PASSWORD
# - client-key.pem # - client-key.pem
# - client-cert.pem # - client-cert.pem
# - root-ca.pem # - root-ca.pem
@ -171,8 +169,6 @@ services:
secrets: secrets:
- MYSQL_USER - MYSQL_USER
- MYSQL_PASSWORD - MYSQL_PASSWORD
- MYSQL_ROOT_USER
- MYSQL_ROOT_PASSWORD
# - client-key.pem # - client-key.pem
# - client-cert.pem # - client-cert.pem
# - root-ca.pem # - root-ca.pem

2
env_vars/.env_db_mysql
View File

@ -6,7 +6,7 @@ MYSQL_USER_FILE=/run/secrets/MYSQL_USER
# MYSQL_PASSWORD=zabbix # MYSQL_PASSWORD=zabbix
MYSQL_PASSWORD_FILE=/run/secrets/MYSQL_PASSWORD MYSQL_PASSWORD_FILE=/run/secrets/MYSQL_PASSWORD
# MYSQL_ROOT_PASSWORD= # MYSQL_ROOT_PASSWORD=
MYSQL_ROOT_PASSWORD_FILE=/run/secrets/MYSQL_ROOT_PASSWORD # MYSQL_ROOT_PASSWORD_FILE=/run/secrets/MYSQL_ROOT_PASSWORD
# MYSQL_ALLOW_EMPTY_PASSWORD=false # MYSQL_ALLOW_EMPTY_PASSWORD=false
# MYSQL_DATABASE=zabbix # MYSQL_DATABASE=zabbix
MYSQL_DATABASE=zabbix MYSQL_DATABASE=zabbix

1
env_vars/.env_db_mysql_proxy
View File

@ -8,7 +8,6 @@ MYSQL_USER=zabbix
MYSQL_PASSWORD=zabbix MYSQL_PASSWORD=zabbix
# MYSQL_PASSWORD_FILE=/run/secrets/MYSQL_PASSWORD # MYSQL_PASSWORD_FILE=/run/secrets/MYSQL_PASSWORD
# MYSQL_ROOT_PASSWORD= # MYSQL_ROOT_PASSWORD=
MYSQL_ROOT_PASSWORD=root_pwd
# MYSQL_ROOT_PASSWORD_FILE=/run/secrets/MYSQL_ROOT_PASSWORD # MYSQL_ROOT_PASSWORD_FILE=/run/secrets/MYSQL_ROOT_PASSWORD
# MYSQL_ALLOW_EMPTY_PASSWORD=false # MYSQL_ALLOW_EMPTY_PASSWORD=false
# MYSQL_DATABASE=zabbix_proxy # MYSQL_DATABASE=zabbix_proxy

2
env_vars/mysql_init/init_proxy_db.sql Normal file
View File

@ -0,0 +1,2 @@
CREATE DATABASE IF NOT EXISTS `zabbix_proxy`;
GRANT ALL ON `zabbix_proxy`.* TO 'zabbix'@'%';