add TLS config

2025-04-24 16:19:58 +02:00
parent 9baca6a5cf
commit 266e2cdeb7
6 changed files with 89 additions and 39 deletions
@@ -16,12 +16,20 @@ data:
    password_file /mosquitto/secrets/passwd
    allow_anonymous false
    
-    # MQTTS listener
-    listener 1883
+    # MQTT over TLS
+    listener 8883
    protocol mqtt
+    cafile /mosquitto/certs/ca.crt
+    certfile /mosquitto/certs/tls.crt
+    keyfile /mosquitto/certs/tls.key
+    require_certificate false

-    # WS Listener
-    listener 9001
+    # WebSocket over TLS
+    listener 9443
    protocol websockets
+    cafile /mosquitto/certs/ca.crt
+    certfile /mosquitto/certs/tls.crt
+    keyfile /mosquitto/certs/tls.key
+    require_certificate false