From 0b3bbd2f5c063d45806565e5c2c5d83681574654 Mon Sep 17 00:00:00 2001
From: Pjotr Prins
Date: Sun, 12 Nov 2023 10:49:10 +0100
Subject: bind-address 0.0.0.0 not recommended

---
 topics/setting-up-local-development-database.gmi         | 8 +++++---
 topics/systems/mariadb/precompute-mapping-input-data.gmi | 3 ---
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/topics/setting-up-local-development-database.gmi b/topics/setting-up-local-development-database.gmi
index edac4e0..3b743b9 100644
--- a/topics/setting-up-local-development-database.gmi
+++ b/topics/setting-up-local-development-database.gmi
@@ -121,20 +121,22 @@ MariaDB [(none)]> show databases;
 4 rows in set (0.001 sec)
 ```
 
-To run/bind on a network interface we can open up completely (dangerous) with:
+To run/bind on a network interface we can open up with:
 
 ```
 export TMPDIR=/tmp
-mysqld_safe --datadir='/var/lib/mysql/' --port=3307 --user=$USER --group=users --nowatch --bind-address 0.0.0.0 --socket=/var/run/mysqld/mysqld.sock
+mysqld_safe --datadir='/var/lib/mysql/' --port=3307 --user=$USER --group=users --nowatch --bind-address 127.0.0.1 --socket=/var/run/mysqld/mysqld.sock
 ```
 
-Test
+Test with
 
 
 ```
  ~/opt/guix-pull/bin/guix shell mysql -- mysql -uwebqtlout -pwebqtlout db_webqtl -h 127.0.0.1 --port=3307
 ```
 
+Please don't use world writeable bind-address 0.0.0.0. If you run it for your own purposes use ssh tunneling instead (see above).
+
 If you need to tweak the server configuration you can load the my.cnf file with the `--defaults-file=var/my.cnf` inside and outside the container.
 
 ## Method 3 (Manual method without Guix)
diff --git a/topics/systems/mariadb/precompute-mapping-input-data.gmi b/topics/systems/mariadb/precompute-mapping-input-data.gmi
index a3142e6..871aef0 100644
--- a/topics/systems/mariadb/precompute-mapping-input-data.gmi
+++ b/topics/systems/mariadb/precompute-mapping-input-data.gmi
@@ -715,9 +715,6 @@ and a client with:
 /export/mysql$ ~/opt/guix-pull/bin/guix shell mysql -- mysql --socket=var/run/mysqld/mysqld.sock -uwebqtlout -pwebqtlout db_webqtl
 ```
 
-
-
-
 ## Preparing for GEMMA
 
 Meanwhile I have prepared tux04 and tux05 for the new runs. Next step is to query the DB and run GEMMA.
-- 
cgit v1.2.3