cdn-ops/global/overlay/etc/puppet/modules/cdn/templates/mqtt/cdn.conf.erb

listener 8883
cafile /usr/local/share/ca-certificates/step_ca_root.crt
certfile /etc/mosquitto/certs/fullchain.pem
keyfile /etc/mosquitto/certs/privkey.pem
require_certificate true
use_identity_as_username true
acl_file /etc/mosquitto/aclfile

log_type all

<% @bridges.each do |remote_dc, bridge_config| -%>
connection <%= @dc %>-to-<%= remote_dc %>
address <%= bridge_config['address'] %>:<%= bridge_config['port'] %>
topic cdn/<%= @dc %>/purge out 1
bridge_cafile /usr/local/share/ca-certificates/step_ca_root.crt
bridge_certfile /etc/mosquitto/certs/cert.pem
bridge_keyfile /etc/mosquitto/certs/privkey.pem

<% end -%>