mariadb module with correct sst user privileges
using puppet module to manage firewalld
3 machines is plenty, really.