UL/ulweb
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(S2-a): keep plaintext MQTT inside compose network

Browse Source
This commit is contained in:
Brent Perteet
2026-08-20 15:44:38 -05:00
parent 9ffe021354
commit 8f638bfa4f
2 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
MQTT_DEVICE_AUTH.md
View File

@@ -12,7 +12,7 @@ exposes three listeners, each with a different trust model:
| Port | Protocol | Auth | Who it's for | | Port | Protocol | Auth | Who it's for |
|------|----------|------|---------------| |------|----------|------|---------------|
| `1883` | MQTT (plaintext) | username/password | internal services (e.g. the Laravel subscriber, Python publisher) | | `1883` | MQTT (plaintext, Compose network only) | username/password | internal backend service; not host-published |
| `8883` | MQTT over TLS | **client certificate** | field devices | | `8883` | MQTT over TLS | **client certificate** | field devices |
| `443` (`/mqtt` → loopback `9001`) | MQTT over WSS/TLS | username/password | scoped app clients | | `443` (`/mqtt` → loopback `9001`) | MQTT over WSS/TLS | username/password | scoped app clients |
| `8884` | MQTT over TLS | username/password (server cert only) | scoped app clients and administrators on networks that expose the raw port | | `8884` | MQTT over TLS | username/password (server cert only) | scoped app clients and administrators on networks that expose the raw port |

1
docker-compose.yml
View File

@@ -11,7 +11,6 @@ services:
mosquitto: mosquitto:
image: eclipse-mosquitto:2 image: eclipse-mosquitto:2
ports: ports:
- "1883:1883"
- "8883:8883" - "8883:8883"
- "8884:8884" - "8884:8884"
- "127.0.0.1:9001:9001" - "127.0.0.1:9001:9001"