{
  services.mosquitto = {
    enable = true;
    listeners = [ {
      users.frigate = {
        acl = [ "readwrite #" ];
        hashedPassword = "$7$101$Zt3Me3AkHbrKBbbI$SsLTGeTwtkFGXS2F1/S3Vg6w7TcgMLU037ttedKaw/Ela0wgqbaAVxecK1j5i5TDw9OjZMkNI9mUzz9l0d7vcg==";
      };
    } ];
  };

  networking.firewall.allowedTCPPorts = [ 1883 ];
}