

It didn’t really change when I put the db in the same compose file. I have them on the same docker network, so any container can reference any other container by its name, in this case mariadb
and access any ports, not just the ones that are exposed.
Evidence for this working is that MariaDB is logging the rejected connection attempts.
Unfortunately no, it’s just one log line over and over. At some point it did have the username and IP, but it usually contains neither.