{
  services.mosquitto = {
    enable = true;
    listeners = [
      {
        users.frigate = {
          acl = [ "readwrite #" ];
          hashedPassword = "$7$101$Zt3Me3AkHbrKBbbI$SsLTGeTwtkFGXS2F1/S3Vg6w7TcgMLU037ttedKaw/Ela0wgqbaAVxecK1j5i5TDw9OjZMkNI9mUzz9l0d7vcg==";
        };
        users.root = {
          acl = [ "readwrite #" ];
          hashedPassword = "$7$101$FjpEh+NpG27RltQe$u2dmg9wz+BBnp1s4z6E6x95TyGO5B9RM2z51qxetvAqO4QDvye1J3UCdMvjuz52iMqzZ3eKi+T2xDeLR7CeMgQ==";
        };
      }
    ];
  };

  networking.firewall.allowedTCPPorts = [ 1883 ];
}