diff --git a/flake.nix b/flake.nix
index 46c9522..9380b15 100644
--- a/flake.nix
+++ b/flake.nix
@@ -1,6 +1,6 @@
 # flake for blakes nixos config
 # define new devices in outputs
-# generation: 271 current  2025-10-11 04:20:39  25.05.20251006.20c4598  6.12.50                          *
+# generation: 272 current  2025-10-11 04:36:05  25.05.20251006.20c4598  6.12.50                          *
 {
   description = "blakes nix config";
   inputs = {
diff --git a/modules/homelab/services/smarthome/mosquitto/default.nix b/modules/homelab/services/smarthome/mosquitto/default.nix
index ebc271b..f4a4b4c 100644
--- a/modules/homelab/services/smarthome/mosquitto/default.nix
+++ b/modules/homelab/services/smarthome/mosquitto/default.nix
@@ -61,6 +61,8 @@ in
         port = 1883;
         address = "0.0.0.0";
         settings.allow_anonymous = true;
+        acl = [ "pattern readwrite #" ];
+        omitPasswordAuth = true;
       }
     ];
     # override umask to make permissions work out