daily autocommit

diff --git a/.etckeeper b/.etckeeper
index 73c7df81257dbd89b2132d8f0a060dc4d922826f..4bba94227f3c7297fcc38e950c184c06c723893c 100755 (executable)
--- a/.etckeeper
+++ b/.etckeeper
@@ -1114,6 +1114,12 @@ maybe chmod 0644 'mysql/mariadb.conf.d/50-server.cnf'
 maybe chmod 0644 'mysql/mariadb.conf.d/60-galera.cnf'
 maybe chmod 0644 'mysql/my.cnf.2021.04.08.22.02.11'
 maybe chmod 0644 'mysql/my.cnf.fallback'
+maybe chown 'mysql' 'mysql/ssl'
+maybe chmod 0700 'mysql/ssl'
+maybe chown 'mysql' 'mysql/ssl/iRedMail.crt'
+maybe chmod 0600 'mysql/ssl/iRedMail.crt'
+maybe chown 'mysql' 'mysql/ssl/iRedMail.key'
+maybe chmod 0600 'mysql/ssl/iRedMail.key'
 maybe chmod 0755 'nagios-plugins'
 maybe chmod 0755 'nagios-plugins/config'
 maybe chmod 0644 'nagios-plugins/config/apt.cfg'

diff --git a/mysql/mariadb.conf.d/50-server.cnf b/mysql/mariadb.conf.d/50-server.cnf
index ff63098a62f34e4c356e2c9860c7e48ddfa2c70f..db6cff7782ef1a86e6bcf403d3bfb0e946dba989 100644 (file)
--- a/mysql/mariadb.conf.d/50-server.cnf
+++ b/mysql/mariadb.conf.d/50-server.cnf
@@ -90,6 +90,9 @@ expire_logs_days        = 10
 #ssl-ca = /etc/ssl/certs/iRedMail.crt
 #ssl-cert = /etc/ssl/certs/iRedMail.crt
 #ssl-key = /etc/ssl/private/iRedMail.key
+ssl-ca = /etc/mysql/ssl/iRedMail.crt
+ssl-cert = /etc/mysql/ssl/iRedMail.crt
+ssl-key = /etc/mysql/ssl/iRedMail.key
 #require-secure-transport = on
 
 #

diff --git a/mysql/ssl/iRedMail.crt b/mysql/ssl/iRedMail.crt
new file mode 100644 (file)
index 0000000..2f062e0
--- /dev/null
+++ b/mysql/ssl/iRedMail.crt
@@ -0,0 +1,97 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----
+MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
+TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
+cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
+WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
+RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
+AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
+R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
+sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
+NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
+Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
+/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
+AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
+Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
+FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
+AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
+Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
+gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
+PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
+ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
+CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
+lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
+avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
+yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
+yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
+hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
+HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
+MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
+nLRbwHOoq7hHwg==
+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

diff --git a/mysql/ssl/iRedMail.key b/mysql/ssl/iRedMail.key
new file mode 100644 (file)
index 0000000..7b64158
--- /dev/null
+++ b/mysql/ssl/iRedMail.key
@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----
+MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSjAgEAAoIBAQDCs54xyOdiAutN
+NQpWuO/lYpZRM4TFAamcRqbVxiXQKEjKM3cd4NW7xlSm9KORUwSJZ0xh9E2j8KF7
+oGN9ZmxKSNsDDJOgcCC/4GeD/asC6X1Yn/niVnfbdjIkEV74udtzamTB2a3e6Hn9
+yh0QqwBd8KJnNMplxYJGfoRaXl+YT9llWV/T+toKS8sRKK5GduyYMU+o2X8EidkJ
+Cz5Q1cXgXZLnT6fDcCq0jNLeJzoQPxllriTvUoyozbVt//7MIMrGFuJ/uUAtb8Bn
+qP9VAV7fne+n24ftTRhuNk9F8HZGeUaaSF0gG3GGil4k3NlRMJ0jAPSLcXzuy10z
+7IGeSgufAgMBAAECggEAS+NGnZD43rLUk9tAlFyw5G9wt2WlMkRbn5XKITiCNIf/
+FxDINNUVeYLsK8bemh4JfqTMmMFoIaYAyvbQ0GfDfZC4DJAyWi5aFW+Z6VBN/2yS
+dqCj/RxGyztef8Bli/ylFG87pnL52hAyvECy43RDSFoqcp+Y4+H/zQoy/CYcjHik
+lcfiTpGVmt0Ie+cuGQant/kJIlZVrRXOSOinaTzPGFH0oMwEF0ooBABUY6O9IL3n
+Gkh5GBsrvkse2VhXSMP+ipVen+YGxlDVJoPIvKGc9iZPBvNUB/B/MSyv7vPMiK1a
+tBi0a8AYP/6q/tSmH9gFfDJzvC/UflWKBh/w+2UTwQKBgQDuENDgSUEq+ix4V2dB
+9649W/pf/tVEXI4GRJZIy1zdexIRz85Iy3sleVW9mIX0HT3Tk2VyCQeQgL+8giAq
+7vB2Swndo6DUDcq6Tk/IE8Muc9cKtwukP1+UiX0+6fGxkQZ8g8s1pGZYgevBTwId
+LLQpaKIi5CcfY1688goJza/wDQKBgQDRXoKk/9KTmTIhfRDv35z7QVaYKLLuYAgO
+bkdqjviLLjQ0LRDqhVLpq2CHpHnmQU5Spcp4C4gexw3CrZYPV9MDRvpTdYElC3HB
+y8890zf/6tJ3xO66HaWbSbR7mPij30fxHmRf9lSbTVl4s4r9rlOCW5qM4Gt4lQZm
+F+7ndznTWwKBgDVTXvZeclKGJ1/tdBu6tzTXXYYTNwJRGR8eTeuQYgTahHmo6rQz
+oCoMu7/0Yk0EH808vwSEMUWVEV3QaBQ14Xcd59/VvzjAviBtWkGe66GEIS8tQVZR
+O7+x7HQjQxhbO/C4NNSXNrWspHpwkDCoytJbtbXLFVhakeYQ8V6wzDAhAoGBAKcI
+jJgQlLI2jT0UZzfIIZh+VxSLm7z7llHU/1ru9zEqynE55v4DIdPUau2sdagSP+dF
+55MAODe9vKetD0PsYCeEL9/3pfGlALuI2yzK3yln8UOmNIL9dgq+saPNtcgfMWkX
+QyMgBf3kptXZ/7BFrNAaPuHXhUYtNm6q92lowBRzAoGAKeGOsLIYfTlfFzT5ZSsw
+m+3wJpR3GP8BHIuFYOiCvPpDdl178IEWJ/hhuz7GfIaylQByxlyfyJ9zIO7V6Me8
+dlSB5UNaksmZ8EeHCGYS7qH8JgxisFEPO/SvgGkMrYY3oT9NUrjQi78AOsIrhBLL
+ZnJkcBhxXwy+TZu4h3vqOrM=
+-----END PRIVATE KEY-----