listener 8883 allow_anonymous false password_file /etc/mosquitto/gfa.d/gfa.pwd require_certificate true cafile /etc/mosquitto/ca_certificates/ca.crt keyfile /etc/mosquitto/certs/server.key certfile /etc/mosquitto/certs/server.crt