enhance passwords management and add default options

defaults/main.yml

@@ -8,12 +8,75 @@ percona_release_package_url: "https://repo.percona.com/apt/percona-release_lates
 # MySQL root password
 percona_root_password: "root_password_change_me"
 
+# Salt for caching_sha2_password plugin
+percona_caching_sha2_password_salt: "1234567890abcdefghij" # CHANGEME: 20 characters needed
+
 # Bind address
 percona_bind_address: "127.0.0.1"
 
 # Port
 percona_port: 3306
 
+# Connection settings
+percona_max_connections: 151
+percona_max_connect_errors: 100
+percona_connect_timeout: 10
+percona_wait_timeout: 28800
+percona_interactive_timeout: 28800
+
+# Buffer settings
+percona_max_allowed_packet: "64M"
+percona_sort_buffer_size: "2M"
+percona_read_buffer_size: "2M"
+percona_read_rnd_buffer_size: "8M"
+percona_join_buffer_size: "2M"
+percona_thread_cache_size: 8
+percona_table_open_cache: 4000
+percona_table_definition_cache: 2000
+
+# InnoDB settings
+percona_innodb_buffer_pool_size: "1G"
+percona_innodb_log_file_size: "256M"
+percona_innodb_log_buffer_size: "16M"
+percona_innodb_flush_log_at_trx_commit: 1
+percona_innodb_flush_method: "O_DIRECT"
+percona_innodb_file_per_table: 1
+percona_innodb_io_capacity: 200
+percona_innodb_io_capacity_max: 2000
+percona_innodb_thread_concurrency: 0
+percona_innodb_read_io_threads: 4
+percona_innodb_write_io_threads: 4
+percona_innodb_open_files: 4000
+
+# Binary logging
+percona_log_bin: "mysql-bin"
+percona_binlog_format: "ROW"
+percona_binlog_expire_logs_seconds: 604800  # 7 days
+percona_max_binlog_size: "100M"
+percona_sync_binlog: 1
+
+# Logging
+percona_log_error: "/var/log/mysql/error.log"
+percona_slow_query_log: 1
+percona_slow_query_log_file: "/var/log/mysql/slow-query.log"
+percona_long_query_time: 2
+percona_log_queries_not_using_indexes: 0
+
+# Replication settings
+percona_server_id: 1
+percona_gtid_mode: "ON"
+percona_enforce_gtid_consistency: "ON"
+percona_log_slave_updates: 1
+
+# Performance schema
+percona_performance_schema: "ON"
+
+# SQL modes
+percona_sql_mode: "ONLY_FULL_GROUP_BY,STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION"
+
+# Authentication plugin (caching_sha2_password or mysql_native_password)
+percona_default_authentication_plugin: "caching_sha2_password"
+
 # Databases to create
 # Example:
 # percona_databases:
@@ -29,5 +92,11 @@ percona_databases: []
 #     password: my_password
 #     host: "%"
 #     priv: "my_db.*:ALL"
+#     auth_plugin: caching_sha2_password  # Optional: caching_sha2_password (default) or mysql_native_password for legacy
+#   - name: legacy_user
+#     password: legacy_password
+#     host: "%"
+#     priv: "my_db.*:ALL"
+#     auth_plugin: mysql_native_password  # For legacy applications
 percona_users: []