version: "3.9"

services:
  mariadb:
    image: mariadb:11.5.2
    container_name: mariadb
    hostname: mariadb
    restart: always
    networks:
      - db_network
    ports:
      - "3306:3306"
    volumes:
      - /usr/share/zoneinfo/Asia/Shanghai:/etc/localtime:ro
      - mariadb_db:/var/lib/mysql
    configs:
      - source: mariadb_conf
        target: /etc/mysql/conf.d/my.cnf
        mode: 0444
    secrets:
      - mariadb_root_key
    environment:
      - MYSQL_ROOT_PASSWORD_FILE=/run/secrets/mariadb_root_key

volumes:
  mariadb_db:

configs:
  mariadb_conf:
    file: my.cnf

secrets:
  mariadb_root_key:
    file: root.key

networks:
  db_network:
    name: db_network
    external: true
#    driver: bridge
#    driver_opts:
#      encrypted: 'true'
#    ipam:
#      driver: default
#      config:
#        - subnet: 172.21.0.1/24