---
mosquitto_base_dir: /etc/mosquitto
mosquitto_pid_file: /var/run/mosquitto.pid
mosquitto_user: mosquitto
mosquitto_group: mosquitto

mosquitto_port: 1883
mosquitto_bind_address: "{{ ansible_default_ipv4.address }}"

mosquitto_packages_extra: []
mosquitto_persistence_enabled: False
mosquitto_persistence_path: /var/lib/mosquitto/mosquitto.db

mosquitto_iptables_enabled: False

mosquitto_password_auth_enabled: False
mosquitto_password_auth_file: "{{ mosquitto_base_dir }}/passwd"
mosquitto_password_auth_users: []
# @var mosquitto_password_auth_users:example: >
# mosquitto_password_auth_users:
#   - name: admin
#     password: mysecret
#     state: present
#   - name: user1
#     password: very_secure
#     state: absent
# @end

mosquitto_acl_enabled: False
mosquitto_acl_file: "{{ mosquitto_base_dir }}/aclfile"
mosquitto_acl: []
# @var mosquitto_acl:example: >
# mosquitto_acl:
#   - name: iot
#     user: admin
#     acls:
#       - acl_base: topic # (topic|pattern, defaults to topic)
#         acl_topic: "#"
#         acl_policy: readwrite
#   - name: readonly_iot
#     user: user1
#     acls:
#       - acl_base: topic
#         acl_topic: my/devices
#         acl_policy: readwrite
# @end

mosquitto_tls_enabled: False
mosquitto_tls_ciphers:
  - DEFAULT
  - "!aNULL"
  - "!eNULL"
  - "!LOW"
  - "!EXPORT"
  - "!SSLv2"
  - "@STRENGTH"
mosquitto_ca_path: /etc/pki/tls/certs/
mosquitto_tls_cert_source: mycert.pem
mosquitto_tls_key_source: mykey.pem
mosquitto_tls_cert_path: "{{ mosquitto_base_dir }}/tls/certs/mycert.pem"
mosquitto_tls_key_path: "{{ mosquitto_base_dir }}/tls/private/mykey.pem"