Add own certs to mosquitto

netmaker_server/files/opt/netmaker_server/mosquitto/config/mosquitto.conf

@@ -1,6 +1,9 @@
 per_listener_settings false
+
 listener 8883
 allow_anonymous false
+certfile /certs/node.crt
+keyfile /certs/node.key
 
 listener 1883
 allow_anonymous false

netmaker_server/tasks/certs.yml

@@ -1,6 +1,7 @@
 - name: Generate PrivateKey
   community.crypto.openssl_privatekey:
     path: /opt/netmaker_server/certs/node.key
+    owner: 1883   #  Set owner to mosquitto-user (all other containers seem to run as root)
 
 - name: Generate Certificate-Signing-Request from privateKey
   community.crypto.openssl_csr:

netmaker_server/templates/docker-compose.yml.template

@@ -123,6 +123,7 @@ services:
       - ./mosquitto/config:/mosquitto/config
       - ./mosquitto/data:/mosquitto/data
       - ./mosquitto/logs:/mosquitto/log
+      - "./certs:/certs:ro"
     depends_on:
       - netmaker
     command: ["/mosquitto/config/wait.sh"]