krebs/2configs/shack/mqtt.nix


1
2
3
4
5
6
7
8
9
10
11
12
13
14

{
  network.firewall.allowedTCPPorts = [ 1883 ];
  network.firewall.allowedUDPPorts = [ 1883 ];
  services.mosquitto = {
    enable = true;
    host = "0.0.0.0";
    users = {};
    # TODO: secure that shit
    aclExtraConf = ''
      pattern readwrite /#
    '';
    allowAnonymous = true;
  };
}