# # These groups are read by MariaDB server. # Use it for options that only the server (but not clients) should see # # See the examples of server my.cnf files in /usr/share/mysql/ # [server] character_set_server=utf8 max_sp_recursion_depth=10 event_scheduler=ON max_long_data_size=16777216 max_allowed_packet=16777216 wait_timeout=2147483 cracklib_password_check=OFF gssapi=OFF max_connections=997 autocommit=0 secure_file_priv=/tmp innodb_file_per_table=1 innodb_flush_method=O_DIRECT innodb_log_file_size=1G innodb_buffer_pool_size=4G innodb_buffer_pool_instances=4 log_output=file log_error=/tmp/error_mariadb.log general_log=1 general_log_file=/tmp/query_mariadb.log slow-query-log=1 slow-query-log-file=/tmp/slowqry_mariadb.log long_query_time=5 log_slow_verbosity=query_plan,explain log_queries_not_using_indexes=ON innodb_defragment=1 # parameters related to encryption at rest of mariadb plugin-load-add=file_key_management.so # stage 1. #file_key_management_filename = /opt/scripts/keys.txt # stage 2 file_key_management_encryption_algorithm=aes_cbc file_key_management_filename = /opt/scripts/keys.enc #file_key_management_filekey = secret # stage 3 file_key_management_filekey = FILE:/opt/scripts/filekey # where /path/to/filekey contains the actual filekey #innodb-encrypt-tables=FORCE #innodb-encrypt-tables=OFF innodb-encrypt-tables=ON #innodb-encrypt-log=0 innodb-encrypt-log=1 innodb-default-encryption-key-id=1 innodb-encryption-threads=4 encrypt_tmp_files=1 encrypt_tmp_disk_tables=1 #encrypt_tmp_files=0 #encrypt_tmp_disk_tables=0 # sql audit # planned parameters #plugin_load=server_audit=server_audit.so server_audit=FORCE_PLUS_PERMANENT server_audit_logging=ON ##server_audit_logging=1 server_audit_output_type=file server_audit_file_path=/tmp/sqlaudit.log server_audit_file_rotate_now=ON server_audit_file_rotate_size=10000000 server_audit_file_rotations=9 server_audit_query_log_limit=1048576 server_audit_excl_users='ipswichdba,event_scheduler' #by keeping the following blank/unset all events are logged #server_audit_events # ignored params for the time being #server_audit_query_log_limit=2147483647 #server_audit_incl_users= #server_audit_syslog_facility # this is only for the mysqld standalone daemon [mysqld] # # * Galera-related settings # [galera] # Mandatory settings #wsrep_on=ON #wsrep_provider= #wsrep_cluster_address= #binlog_format=row #default_storage_engine=InnoDB #innodb_autoinc_lock_mode=2 # # Allow server to accept connections on all interfaces. # #bind-address=0.0.0.0 # # Optional setting #wsrep_slave_threads=1 #innodb_flush_log_at_trx_commit=0 # this is only for embedded server [embedded] # This group is only read by MariaDB servers, not by MySQL. # If you use the same .cnf file for MySQL and MariaDB, # you can put MariaDB-only options here [mariadb] # This group is only read by MariaDB-10.1 servers. # If you use the same .cnf file for MariaDB of different versions, # use this group for options that older servers don't understand [mariadb-10.1]