meross/mosquitto/authenticated.conf

Utility to configure Meross devices for local MQTT

log_type all
log_dest stdout

listener 1883

listener 8883

allow_anonymous false

# replace with your CA Root
cafile ../certs/ca.crt

# replace with your server certificate and key paths
certfile ../certs/server.crt
keyfile ../certs/server.key

auth_plugin /usr/local/opt/mosquitto/share/auth-plug.so
tls_version tlsv1.2

auth_opt_backends mysql
auth_opt_host 127.0.0.1
auth_opt_port 3306
auth_opt_dbname mosquitto
auth_opt_user mosquitto
auth_opt_pass mosquitto
auth_opt_userquery SELECT password_hash FROM users WHERE username = '%s'
auth_opt_aclquery SELECT topic FROM acls WHERE (username = '%s') AND (rw >= %d)
auth_opt_superquery SELECT IFNULL(COUNT(*), 0) FROM users WHERE username = '%s' AND is_super = 1