fix(S2-a): keep broker credential database outside Git

This commit is contained in:
Brent Perteet
2026-08-20 15:52:14 -05:00
parent 8f638bfa4f
commit 8aea87c3cd
3 changed files with 10 additions and 3 deletions

View File

@@ -2,7 +2,7 @@ per_listener_settings true
# Plain MQTT — internal services and clients authenticate with username/password on port 1883
listener 1883 0.0.0.0
password_file /mosquitto/config/passwd
password_file /mosquitto/secrets/passwd
acl_file /mosquitto/config/devices.acl
allow_anonymous false
@@ -10,7 +10,7 @@ allow_anonymous false
# host loopback; nginx supplies the public WSS/TLS endpoint at /mqtt on port 443.
listener 9001 0.0.0.0
protocol websockets
password_file /mosquitto/config/passwd
password_file /mosquitto/secrets/passwd
acl_file /mosquitto/config/devices.acl
allow_anonymous false
@@ -35,6 +35,6 @@ listener 8884 0.0.0.0
certfile /mosquitto/certs/public-fullchain.pem
keyfile /mosquitto/certs/public-privkey.pem
require_certificate false
password_file /mosquitto/config/passwd
password_file /mosquitto/secrets/passwd
allow_anonymous false
acl_file /mosquitto/config/devices.acl