273 current 2025-10-11 04:43:13 25.05.20251006.20c4598 6.12.50 *

modules/homelab/services/smarthome/mosquitto/default.nix

@@ -60,9 +60,13 @@ in
       {
         port = 1883;
         address = "0.0.0.0";
-        settings.allow_anonymous = true;
-        acl = [ "pattern readwrite #" ];
-        omitPasswordAuth = true;
+        users.zigbee = {
+          acl = [ "readwrite #" ];
+          hashedPassword = "$7$101$140powz2MtsRawFT$ydndjal9wCAywIWtUEAh/IusdfDFvnHMupTFjdS7Ad/EjsEIbJgHrLY9waCe4Z3142XieuxMrXUDjMTp2qwyiw==";
+        };
+        #settings.allow_anonymous = true;
+        #acl = [ "pattern readwrite #" ];
+        #omitPasswordAuth = true;
       }
     ];
     # override umask to make permissions work out

modules/homelab/services/smarthome/zigbee2mqtt/default.nix

@@ -63,6 +63,8 @@ in
             base_topic = "zigbee2mqtt";
             client_id = "zigbee2mqtt";
             server = "mqtt://localhost:1883";
+            user = "!/run/secrets/mosquitto_passwd passwd";
+            password = "!/run/secrets/mosquitto_passwd passwd";
             keepalive = 20;
           };
           serial = {