- name: sansible.mosquitto
  version: v3.0

# Whether to install mosquitto_pub and _sub cmds
sansible_mosquitto_install_clients: no
sansible_mosquitto_version: 1.6.*
sansible_mosquitto_aws_enabled: yes
sansible_mosquitto_aws_region: eu-west-1
# List of files that need to be copied and secured from S3
# These should be things like TLS files
sansible_mosquitto_aws_s3_files:
  - bucket: config-bucket
    path: /mosquitto/tls/ca.crt
    dest: /etc/mosquitto/certs/ca.crt
    mode: "0600"
  - bucket: config-bucket
    path: /mosquitto/tls/server.crt
    dest: /etc/mosquitto/certs/server.crt
    mode: "0600"
  - bucket: config-bucket
    path: /mosquitto/tls/server.key
    dest: /etc/mosquitto/certs/server.key
    mode: "0600"
# All key/value pairs under sansible_mosquitto_settings will be added to 
# `/etc/mosquitto/conf.d/mosquitto.local.conf`
sansible_mosquitto_settings:
  allow_anonymous: yes
  persistence: yes
sansible_mosquitto_user_list:
  # Format is username: password, passwords must be generated using mosquitto_passwd
  # sansible_mosquitto_password_file must be defined if you want to enable users
  user_one: hash
  user_two: hash

- name: Install Mosquitto
  hosts: sandbox

  roles:
    - name: sansible.mosquitto

- name: Install Mosquitto with alternate port
  hosts: sandbox

  roles:
    - name: sansible.mosquitto
      sansible_mosquitto_settings:
        port: 8000

- name: Install Mosquitto with username/password file
  hosts: sandbox

  roles:
    - name: sansible.mosquitto
      sansible_mosquitto_settings:
        allow_anonymous: "false"
      sansible_mosquitto_password_file: /etc/mosquitto/passwd
      sansible_mosquitto_user_list:
        user_one: hash
        user_two: hash