secure.yml 968 B

12345678910111213141516171819202122232425262728293031
  1. ---
  2. - name: Update MySQL root password for localhost root account (5.7.x).
  3. shell: >
  4. mysql -u root -NBe
  5. "SET PASSWORD FOR 'root'@'localhost' = PASSWORD('{{ mysql_root_password }}'); FLUSH PRIVILEGES;"
  6. register: result
  7. ignore_errors: true
  8. - name: Disallow root login remotely
  9. command: 'mysql -NBe "{{ item }}" -p"{{ mysql_root_password }}"'
  10. with_items:
  11. - DELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1')
  12. changed_when: false
  13. when: (disable_remote_root_login|bool) and (result is succeeded)
  14. - name: Remove anonymous MySQL users
  15. mysql_user:
  16. name: ''
  17. host_all: yes
  18. login_user: root
  19. login_password: "{{ mysql_root_password }}"
  20. state: absent
  21. login_unix_socket: "{{ mariadb_socket }}"
  22. - name: Remove MySQL test database
  23. mysql_db:
  24. name: test
  25. login_user: root
  26. login_password: "{{ mysql_root_password }}"
  27. state: absent
  28. login_unix_socket: "{{ mariadb_socket }}"