Changing MySQL Port and Enabling TLS on Azure VM

To run MySQL on a non-standard port with TLS on your Azure VM, you'll need to make several changes beyond just updating the .env file. Here's what you need to do:

1. MySQL Server Configuration

First, modify your MySQL server configuration:

BASHCopied
# Edit the MySQL configuration file
sudo nano /etc/mysql/mysql.conf.d/mysqld.cnf

Change these settings:

# Change the port
port = your_custom_port

# Enable SSL/TLS
ssl-ca=/path/to/ca-cert.pem
ssl-cert=/path/to/server-cert.pem
ssl-key=/path/to/server-key.pem

2. Firewall Configuration

You need to open the custom port in both:

1. Azure Network Security Group (NSG):

BASHCopied
# Using Azure CLI
az network nsg rule create --name MySQL-Custom-Port \
  --nsg-name your-nsg-name \
  --priority 1001 \
  --resource-group your-resource-group \
  --access Allow \
  --protocol Tcp \
  --direction Inbound \
  --source-address-prefixes * \
  --source-port-ranges * \
  --destination-port-ranges your_custom_port

2. VM's firewall (if enabled):

BASHCopied
# For Ubuntu/Debian
sudo ufw allow your_custom_port/tcp

# For CentOS/RHEL
sudo firewall-cmd --permanent --add-port=your_custom_port/tcp
sudo firewall-cmd --reload

3. Update Your Environment Variables

Update your .env file with the new port:

DATABASE_PORT=your_custom_port

4. Restart MySQL

BASHCopied
sudo systemctl restart mysql

5. Test Connection

Update your connection command to include the port:

BASHCopied
mysql -h url.to.host -P your_custom_port -u lizard -p --ssl-ca=./ca-cert.pem

Your Django configuration looks correct as it's already set up to use the environment variables and SSL certificates. Just make sure the paths to your certificates are correct and accessible by your application.