mqtt-deployment.txt

sudo yum update -y
sudo yum install epel-release -y
sudo yum install mosquitto -y
sudo systemctl enable mosquitto
sudo systemctl start mosquitto
sudo systemctl status mosquitto

//optional
sudo rm /etc/mosquitto/mosquitto.conf

//to create password
sudo mosquitto_passwd -c /etc/mosquitto/passwd your_username

sudo yum install certbot -y
sudo certbot certonly --standalone -d mqtt.yourdomain.com

sudo vi /etc/mosquitto/mosquitto.conf
  ->listener 8883
  ->cafile /etc/letsencrypt/live/mqtt.yourdomain.com/chain.pem
  ->certfile /etc/letsencrypt/live/mqtt.yourdomain.com/cert.pem
  ->keyfile /etc/letsencrypt/live/mqtt.yourdomain.com/privkey.pem
  ->allow_anonymous false  # Set to true if you don’t need authentication
  ->password_file /etc/mosquitto/passwd

sudo systemctl restart mosquitto

#Find the CA Certificate File
-> curl -o /etc/ssl/certs/lets-encrypt-ca.pem https://letsencrypt.org/certs/isrgrootx1.pem

#running
mosquitto_pub -h mqtt.yourdomain.com -t "test" -m "hello" -p 8883 --cafile /etc/ssl/certs/lets-encrypt-ca.pem -u "your_username" -P "your_password"