apiVersion: v1
kind: ConfigMap
metadata:
  name: mosquitto-config
  namespace: mosquitto
data:
  mosquitto.conf: |

    persistence true
    persistence_location /mosquitto/data/
    log_dest stdout
    log_type all
    connection_messages true
    log_timestamp true

    password_file /mosquitto/secrets/passwd
    allow_anonymous false
    acl_file /mosquitto/config/acl.conf
    
    # MQTT over TLS
    listener 8883
    protocol mqtt
    cafile /mosquitto/certs/ca.crt
    certfile /mosquitto/certs/tls.crt
    keyfile /mosquitto/certs/tls.key
    require_certificate false

    # WebSocket over TLS
    listener 9443
    protocol websockets
    cafile /mosquitto/certs/ca.crt
    certfile /mosquitto/certs/tls.crt
    keyfile /mosquitto/certs/tls.key
    require_certificate false