xoxys.mosquitto/defaults/main.yml

60 lines
1.5 KiB
YAML

---
mosquitto_base_dir: /etc/mosquitto
mosquitto_pid_file: /var/run/mosquitto.pid
mosquitto_user: mosquitto
mosquitto_group: mosquitto
mosquitto_port: 1883
mosquitto_bind_address: "{{ ansible_default_ipv4.address }}"
mosquitto_packages_extra: []
mosquitto_persistence_enabled: False
mosquitto_persistence_path: /var/lib/mosquitto/mosquitto.db
mosquitto_password_auth_enabled: False
mosquitto_password_auth_file: "{{ mosquitto_base_dir }}/passwd"
mosquitto_password_auth_users: []
# @var mosquitto_password_auth_users:example: >
# mosquitto_password_auth_users:
# - name: admin
# password: mysecret
# state: present
# - name: user1
# password: very_secure
# state: absent
# @end
mosquitto_acl_enabled: False
mosquitto_acl_file: "{{ mosquitto_base_dir }}/aclfile"
mosquitto_acl: []
# @var mosquitto_acl:example: >
# mosquitto_acl:
# - name: iot
# user: admin
# acls:
# - acl_base: topic # (topic|pattern, defaults to topic)
# acl_topic: "#"
# acl_policy: readwrite
# - name: readonly_iot
# user: user1
# acls:
# - acl_base: topic
# acl_topic: my/devices
# acl_policy: readwrite
# @end
mosquitto_tls_enabled: False
mosquitto_tls_ciphers:
- DEFAULT
- "!aNULL"
- "!eNULL"
- "!LOW"
- "!EXPORT"
- "!SSLv2"
- "@STRENGTH"
mosquitto_ca_path: /etc/pki/tls/certs/
mosquitto_tls_cert_source: mycert.pem
mosquitto_tls_key_source: mykey.pem
mosquitto_tls_cert_path: "{{ mosquitto_base_dir }}/tls/certs/mycert.pem"
mosquitto_tls_key_path: "{{ mosquitto_base_dir }}/tls/private/mykey.pem"