listener 8883
protocol mqtt

certfile {{ tls_certs }}/{{ inventory_hostname }}.crt
keyfile {{ tls_private }}/{{ inventory_hostname }}.key
cafile {{ tls_certs }}/ca.crt
tls_version tlsv1.3

acl_file /etc/mosquitto-tls/acl.conf
require_certificate true
use_identity_as_username true