[mysqld]
#
# * SSL
#
# ssl-mode = DISABLED PREFERRED REQUIRED VERIFY_CA VERIFY_IDENTITY
#ssl-mode			= PREFERRED		# unknown variable 'ssl-mode=PREFERRED'
#ssl-mode			= VERIFY_CA		# nur CA muß passen
#ssl-mode			= VERIFY_IDENTITY	# CA + Hostnamen müssen passen
#ssl				= ON			# Deprecated, use --ssl-mode.
ssl-ca				= /etc/mysql/ca.pem
ssl-cert			= /etc/mysql/server-cert.pem
ssl-key  			= /etc/mysql/server-key.pem
#
### TLS-Version
tls-version			= TLSv1.3,TLSv1.2
#
### nur noch verschlüsselte Verbindungen möglich
require_secure_transport	= ON

[sst]
# https://galeracluster.com/library/documentation/xtrabackup-options.html
compressor                      = "gzip -1"
decompressor                    = "gzip -dc"
rebuild                         = ON
compact                         = ON
encrypt				= 4
ssl-ca				= /etc/mysql/ca.pem
ssl-cert			= /etc/mysql/server-cert.pem
ssl-key  			= /etc/mysql/server-key.pem