nixos-config/machines/shinobu/services/wordclock-dimmer.nix

{ config, ... }:
let
  password = "ymfQkXcEqGuk62S";
in
{
  services.mosquitto = {
    enable = true;
    listeners = [
      {
        users = {
          wordclock = {
            acl = [
              "readwrite wordclock/color/+"
            ];
            inherit password;
          };
        };
        settings = {
          allow_anonymous = false;
        };
      }
    ];
  };

  networking.firewall.interfaces.br-iot.allowedTCPPorts = [ 1883 ];

  services.wordclock-dimmer = {
    enable = true;
    mqtt = {
      user = "wordclock";
      inherit password;
      host = "localhost";
    };
  };
}