[mysqld]

plugin-load-add=file_key_management
file-key-management
file_key_management_filekey = mysecretpassword
file_key_management_filename = /etc/my.cnf.d/keys.enc
file_key_management_encryption_algorithm=aes_cbc

innodb-encrypt-tables
innodb-encrypt-log
innodb-encryption-threads=4

aria-encrypt-tables
encrypt-binlog
encrypt-tmp-disk-tables
encrypt-tmp-files