When I deploy a mariadb and create Users for application access, I usually include the hostname or ip of the application for improved security:
CREATE USER \'