mosquitto.conf

# Plain MQTT protocol
listener 1883
protocol mqtt

# Plain WebSockets configuration
listener 8000
protocol websockets

auth_plugin /mosquitto/go-auth.so
auth_opt_log_level debug

auth_opt_backends postgres
auth_opt_check_prefix false
allow_anonymous false

# Postgres configuration
auth_opt_pg_host db
auth_opt_pg_port 5432
auth_opt_pg_dbname auth_db
auth_opt_pg_user auth_db_admin
auth_opt_pg_password 123456

auth_opt_pg_connect_tries 5
auth_opt_pg_sslmode disable
auth_opt_pg_userquery SELECT "passwordHash" FROM "MqttUsers" WHERE "userName" = $1 and "isActive" = true limit 1
auth_opt_pg_aclquery SELECT "topic" FROM "MqttAcls" acl JOIN "MqttUsers" "user" on acl."userId" = "user".id WHERE "user"."userName" = $1 and (acl.rw = $2 or acl.rw = 999)
auth_opt_pg_superquery SELECT count(*) FROM "MqttUsers" WHERE "userName" = $1 and "isAdmin" = true

auth_opt_hasher bcrypt
auth_opt_hasher_cost 10