foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mosquitto: Refactor mqtt infra

Browse source
This commit is contained in:
Timo Makinen 2024-12-27 15:10:40 +00:00
parent a8841252d1
commit 7ee2572e04
6 changed files with 99 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

23
roles/mosquitto/templates/mosquitto.conf.j2
View file

@ -1,7 +1,3 @@
# use different settings for plaintext and tls listeners
per_listener_settings true
# listen to mqtt
listener 1883
protocol mqtt
@ -9,15 +5,12 @@ acl_file /etc/mosquitto/acl.conf
password_file /etc/mosquitto/passwd
allow_anonymous false
# listen to mqtt over websockets
listener 8883
protocol mqtt
connection tls-bridge
address {{ inventory_hostname }}:8883
bridge_cafile {{ tls_certs }}/ca.crt
bridge_certfile {{ tls_certs }}/{{ inventory_hostname }}.crt
bridge_keyfile {{ tls_private }}/{{ inventory_hostname }}.key
certfile {{ tls_certs }}/{{ inventory_hostname }}.crt
keyfile {{ tls_private }}/{{ inventory_hostname }}.key
cafile {{ tls_certs }}/ca.crt
tls_version tlsv1.3
acl_file /etc/mosquitto/acl-tls.conf
require_certificate true
use_identity_as_username true
{% for shelly in shellies %}
topic # out 0 shellies/{{ shelly['name'] }}/ home/{{ shelly['room'] }}/{{ shelly['device'] }}/
{% endfor %}