# Functional test broker: authenticated clients may publish/subscribe to any topic.
# Both plaintext and TLS listeners share password authentication; no topic ACL.
allow_anonymous false
global_plugin /usr/lib/mosquitto_password_file.so
plugin_opt_password_file /run/mqtt-secrets/passwords

persistence true
persistence_location /mosquitto/data/
persistence_file mosquitto.db
autosave_interval 30
max_queued_messages 256
max_queued_bytes 4194304
max_inflight_messages 20
max_packet_size 32768
message_size_limit 16384
global_max_clients 64
queue_qos0_messages false
log_dest stdout
log_type error
log_type warning
log_type notice
connection_messages true

listener 8883
protocol mqtt
certfile /mosquitto/certs/server.crt
keyfile /mosquitto/certs/server.key
# Username/password authentication; clients verify this server's certificate.
require_certificate false
tls_version tlsv1.2

# Not published on the host unless the insecure Compose override is included.
listener 1883
protocol mqtt