100 lines
3.0 KiB
Plaintext
100 lines
3.0 KiB
Plaintext
|
## NOTE:
|
|||
|
|
## This config file overrides data/configs/cluster.hocon,
|
|||
|
|
## and is merged with environment variables which start with 'EMQX_' prefix.
|
|||
|
|
##
|
|||
|
|
## Config changes made from EMQX dashboard UI, management HTTP API, or CLI
|
|||
|
|
## are stored in data/configs/cluster.hocon.
|
|||
|
|
## To avoid confusion, please do not store the same configs in both files.
|
|||
|
|
##
|
|||
|
|
## See https://www.emqx.io/docs/en/latest/configuration/configuration.html for more details.
|
|||
|
|
## Configuration full example can be found in etc/examples
|
|||
|
|
|
|||
|
|
node {
|
|||
|
|
name = "emqx@127.0.0.1"
|
|||
|
|
cookie = "emqxsecretcookie"
|
|||
|
|
data_dir = "data"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
cluster {
|
|||
|
|
name = emqxcl
|
|||
|
|
discovery_strategy = manual
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
## EMQX provides support for two primary log handlers: `file` and `console`, with an additional `audit` handler specifically designed to always direct logs to files.
|
|||
|
|
## The system's default log handling behavior can be configured via the environment variable `EMQX_DEFAULT_LOG_HANDLER`, which accepts the following settings:
|
|||
|
|
##
|
|||
|
|
## - `file`: Directs log output exclusively to files.
|
|||
|
|
## - `console`: Channels log output solely to the console.
|
|||
|
|
##
|
|||
|
|
## It's noteworthy that `EMQX_DEFAULT_LOG_HANDLER` is set to `file` when EMQX is initiated via systemd `emqx.service` file.
|
|||
|
|
## In scenarios outside systemd initiation, `console` serves as the default log handler.
|
|||
|
|
|
|||
|
|
## Read more about configs here: https://www.emqx.io/docs/en/latest/configuration/logs.html
|
|||
|
|
|
|||
|
|
log {
|
|||
|
|
# file {
|
|||
|
|
# level = warning
|
|||
|
|
# }
|
|||
|
|
# console {
|
|||
|
|
# level = warning
|
|||
|
|
# }
|
|||
|
|
}
|
|||
|
|
dashboard {
|
|||
|
|
listeners {
|
|||
|
|
http {
|
|||
|
|
## Comment out 'bind' (or set bind=0) to disable listener.
|
|||
|
|
bind = 18083
|
|||
|
|
}
|
|||
|
|
https {
|
|||
|
|
## Uncomment to enable
|
|||
|
|
# bind = 18084
|
|||
|
|
ssl_options {
|
|||
|
|
certfile = "${EMQX_ETC_DIR}/certs/cert.pem"
|
|||
|
|
keyfile = "${EMQX_ETC_DIR}/certs/key.pem"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 必须禁止匿名访问，是开启认证的必备步骤
|
|||
|
|
allow_anonymous = false
|
|||
|
|
|
|||
|
|
# 启用http协议的认证方式
|
|||
|
|
authentication = [
|
|||
|
|
{
|
|||
|
|
# 后端类型：http 服务
|
|||
|
|
backend = "http"
|
|||
|
|
enable = true
|
|||
|
|
mechanism = "password_based"
|
|||
|
|
|
|||
|
|
# ----- 请求配置 -----
|
|||
|
|
# 请求方法：POST 或 GET（推荐 POST，更安全）
|
|||
|
|
method = "post"
|
|||
|
|
# 你的认证服务 URL（请替换为实际地址）
|
|||
|
|
url = "http://dj-multictrl-api:8080/api/mqtt/auth"
|
|||
|
|
|
|||
|
|
# 请求头
|
|||
|
|
headers {
|
|||
|
|
"Content-Type" = "application/json"
|
|||
|
|
"Accept" = "application/json"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# 请求体模板（支持占位符）
|
|||
|
|
body {
|
|||
|
|
username = "${username}"
|
|||
|
|
password = "${password}"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
# ----- 性能与超时 -----
|
|||
|
|
request_timeout = "5s" # HTTP 请求超时时间
|
|||
|
|
pool_size = 8 # 连接池大小
|
|||
|
|
|
|||
|
|
# ----- 认证结果判断 -----
|
|||
|
|
# 服务端需返回 JSON 格式，包含 result 字段：
|
|||
|
|
# {"result": "allow"} → 允许连接
|
|||
|
|
# {"result": "deny"} → 拒绝连接
|
|||
|
|
# {"result": "ignore"} → 忽略，继续后续认证链
|
|||
|
|
# 如果返回 HTTP 4xx/5xx 状态码，视为 ignore
|
|||
|
|
}
|
|||
|
|
]
|