{ config, pkgs, ... }:

{
  services.mosquitto = {
    enable = true;

    listeners = [
      {
        users."espresense" = {
          password = "insecure-password";
          acl = [ "readwrite #" ];
        };
        users."home-assistant" = {
          hashedPassword = "$7$101$7uaagoQWQ3ICJ/wg$5cWZs4ae4DjToe44bOzpDopPv1kRaaVD+zF6BE64yDJH2/MBqXfD6f2/o9M/65ArhV92DAK+txXRYsEcZLl45A==";
          acl = [ "readwrite #" ];
        };
        users."ps5-mqtt" = {
          password = "insecure-password";
          acl = [ "readwrite #" ];
        };
        users."shairport-mqtt" = {
          password = "insecure-password";
          acl = [ "readwrite #" ];
        };
      }
    ];
  };

  # networking.firewall = {
  #   allowedTCPPorts = [ 1883 ];
  # };
}