Files
location-mqtt-tracker-app/mosquitto/config/mosquitto.conf
Joachim Hummel edcb97f01f Security fix: Disable anonymous MQTT access
Changed allow_anonymous from true to false in mosquitto.conf to prevent unauthorized access to the MQTT broker. Authentication is now required for all connections.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-30 22:48:23 +00:00

46 lines
1.1 KiB
Plaintext

# Mosquitto Configuration für Location Tracker
# Listener auf allen Interfaces
listener 1883
protocol mqtt
# WebSocket Listener (optional)
listener 9001
protocol websockets
# Persistenz
persistence true
persistence_location /mosquitto/data/
# Logging
log_dest file /mosquitto/log/mosquitto.log
log_dest stdout
log_type error
log_type warning
log_type notice
log_type information
log_timestamp true
# Authentifizierung
# Aktiviert bei Erstinstallation - Admin User wird durch Sync konfiguriert
# allow_anonymous false
allow_anonymous false
password_file /mosquitto/config/password.txt
# Access Control List
acl_file /mosquitto/config/acl.txt
# Connection Settings
max_connections -1
# QoS 1/2 Settings - optimiert für GPS Tracking
max_inflight_messages 100 # Erhöht von 20 - mehr parallele QoS 1/2 Messages
max_queued_messages 10000 # Erhöht von 1000 - größerer Buffer bei Offline-Clients
max_queued_bytes 0 # 0 = unlimited
# QoS 0 Settings
upgrade_outgoing_qos false # Respektiere Client QoS Level
# Retain Messages
retain_available true