foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

mosquitto: Configure TLS listener authorization

Browse source
This commit is contained in:
Timo Makinen 2024-12-23 09:47:01 +00:00
parent 0adad8fa18
commit aa4b46465c
2 changed files with 20 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

15
roles/mosquitto/templates/mosquitto.conf.j2
View file

@ -1,18 +1,23 @@
# authentication
acl_file /etc/mosquitto/acl.conf
password_file /etc/mosquitto/passwd
allow_anonymous false
# use different settings for plaintext and tls listeners
per_listener_settings true
# listen to mqtt
listener 1883
protocol mqtt
acl_file /etc/mosquitto/acl.conf
password_file /etc/mosquitto/passwd
allow_anonymous false
# listen to mqtt over websockets
listener 8883
protocol mqtt
# tls options
certfile {{ tls_certs }}/{{ inventory_hostname }}.crt
keyfile {{ tls_private }}/{{ inventory_hostname }}.key
cafile {{ tls_certs }}/ca.crt
tls_version tlsv1.3
acl_file /etc/mosquitto/acl-tls.conf
require_certificate true
use_identity_as_username true