For security reasons, I setup mySql connection like this:
1. Add user with priviledges Select, Insert, Update and Delete to Rose DB only from localhost
2. Place that user to your 3 server config files
If you need remote access to rose db, you can makes another user, maybe with difference priviledges ( Create, Drop, etc. )
if you want only remote from your local network:
add user with host 192.168.0.% ( change to your LAN IP ) or
192.168.0.100 ( allow only from that local IP )
if you want to allow from anywhere: fill Host with % or
222.180.180.202 ( allow only from that external IP )
Also, if you host MySQL from your own machine, you don’t need port-forwarding port 3306 ( or whatever your MySQL port you used ) if you dont plan to remote database from outside (via internet)
CMIIW.