summaryrefslogtreecommitdiffstats
path: root/krebs/2configs/shack/mqtt.nix
diff options
context:
space:
mode:
authormakefu <github@syntax-fehler.de>2021-12-04 19:08:15 +0100
committermakefu <github@syntax-fehler.de>2021-12-04 19:08:15 +0100
commitecaaa1faae465b4ea2ab07e9a6204f2ceaa752a3 (patch)
treeb1d6a970f7a1814bafed3e5360ff14d9864c8dec /krebs/2configs/shack/mqtt.nix
parent1ce8bf7c80a6daa7943804a2c45d8a46780d7b1a (diff)
mqtt: migrate to new configuration format
Diffstat (limited to 'krebs/2configs/shack/mqtt.nix')
-rw-r--r--krebs/2configs/shack/mqtt.nix22
1 files changed, 14 insertions, 8 deletions
diff --git a/krebs/2configs/shack/mqtt.nix b/krebs/2configs/shack/mqtt.nix
index e78f0f974..8ace42383 100644
--- a/krebs/2configs/shack/mqtt.nix
+++ b/krebs/2configs/shack/mqtt.nix
@@ -1,15 +1,21 @@
-# hostname: mqtt.shack
+{ ... }:
{
networking.firewall.allowedTCPPorts = [ 1883 ];
networking.firewall.allowedUDPPorts = [ 1883 ];
services.mosquitto = {
enable = true;
- host = "0.0.0.0";
- users = {};
- # TODO: secure that shit
- aclExtraConf = ''
- pattern readwrite #
- '';
- allowAnonymous = true;
+ persistence = false;
+ settings.max_keepalive = 60;
+ listeners = [
+ {
+ port = 1883;
+ omitPasswordAuth = true;
+ users = {};
+ settings = {
+ allow_anonymous = true;
+ };
+ acl = [ "topic readwrite #" "pattern readwrite #" ];
+ }
+ ];
};
}