From 6d8ecfb5892bb6d7d2bd7ebcf525848bd17de8ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Xavi=20Lle=C3=B3=20Tom=C3=A1s?= <xavi@verdnatura.es>
Date: Wed, 11 Dec 2024 13:50:12 +0100
Subject: [PATCH] Refs #8140: MariaDB Server Deploy - Role WIP

---
 roles/services/tasks/mariadb.yml | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/roles/services/tasks/mariadb.yml b/roles/services/tasks/mariadb.yml
index 295afb7..619c795 100644
--- a/roles/services/tasks/mariadb.yml
+++ b/roles/services/tasks/mariadb.yml
@@ -68,3 +68,15 @@
     marker: "# {mark} ANSIBLE-MANAGED TMPFS ENTRY"
     block: |
       tmpfs /mnt/mysqltmp         tmpfs rw,size=6144M         0 0
+
+- name: Insert MySQL certificates
+  copy:
+    content: "{{ item.content }}"
+    dest: "{{ item.dest }}"
+    owner: mysql
+    group: mysql
+    mode: "{{ item.mode }}"
+  loop:
+    - { content: '{{ ca_mysql }}', dest: '/etc/mysql/ca.pem', mode: 'u=rw,g=r,o=r' }
+    - { content: '{{ cert_mysql }}', dest: '/etc/mysql/cert.pem', mode: 'u=rw,g=r,o=r' }
+    - { content: '{{ private_mysql }}', dest: '/etc/mysql/key.pem', mode: 'u=rw,g=,o=' }