[server]

[mysqld]
user                    = mysql
pid-file                = /run/mysqld/mysqld.pid
basedir                 = /usr
datadir                 = /var/lib/mysql
tmpdir                  = /tmp
lc-messages-dir         = /usr/share/mysql
lc-messages             = en_US
skip-external-locking

ssl-cert=/var/lib/mysql/pki/login/fullchain.pem
ssl-key=/var/lib/mysql/pki/login/privkey.key
ssl-ca=/var/lib/mysql/pki/sst/ca.crt

bind-address            = *
log_error = /var/log/mysql/error.log
expire_logs_days        = 10

# * SSL/TLS
#

# For documentation, please read
# https://mariadb.com/kb/en/securing-connections-for-client-and-server/
#ssl-ca = /etc/mysql/cacert.pem
#ssl-cert = /etc/mysql/server-cert.pem
#ssl-key = /etc/mysql/server-key.pem
require-secure-transport = on

character-set-server  = utf8mb4
collation-server      = utf8mb4_general_ci

[embedded]

[mariadb]

[mariadb-10.6]

wsrep_on=ON
skip-name-resolve=0
binlog_format=ROW
default-storage-engine=innodb
innodb_autoinc_lock_mode=2
innodb_locks_unsafe_for_binlog=1
innodb_doublewrite=1
max_connections=2048
query_cache_size=0
query_cache_type=0
wsrep_provider=/usr/lib/galera/libgalera_smm.so
wsrep_cluster_name="Galera Cluster SSL"
wsrep_cluster_address="gcomm://maria1ssl.gehrt-industries.de,maria2ssl.gehrt-industries.de"
wsrep_provider_options ="gmcast.listen_addr=tcp://[::]:4567;gcache.size=1024M;gmcast.segment=0;socket.ssl_cert=/var/lib/mysql/pki/sst/certificate.crt;socket.ssl_key=/var/lib/mysql/pki/sst/privkey.key;socket.ssl_ca=/var/lib/mysql/pki/sst/ca.crt"
wsrep_slave_threads=1
wsrep_certify_nonPK=1
wsrep_max_ws_rows=131072
wsrep_max_ws_size=1073741824
wsrep_debug=0
wsrep_convert_LOCK_to_trx=0
wsrep_retry_autocommit=1
wsrep_auto_increment_control=1
wsrep_drupal_282555_workaround=0
wsrep_causal_reads=0
wsrep_notify_cmd=
wsrep_sst_method=mariabackup
wsrep_sst_auth =XX:XX

[sst]
sockopt=",cipher=AES128-SHA"
encrypt=3
tca=/var/lib/mysql/pki/sst/ca.crt
tcert=/var/lib/mysql/pki/sst/certificate.crt
tkey=/var/lib/mysql/pki/sst/privkey.key
ssl-ca=/var/lib/mysql/pki/sst/ca.crt
ssl-cert=/var/lib/mysql/pki/sst/certificate.crt
ssl-key=/var/lib/mysql/pki/sst/privkey.key