{
  services.homeAssistantConfig.mqtt = {
    # discovery = false;

    # for mosquitto
    broker = "127.0.0.1";
    username = fileContents <secrets/home-assistant/mqtt-user>;
    password = fileContents <secrets/home-assistant/mqtt-password>;

  };

  services.mosquitto = {
    enable = true;
    host = "0.0.0.0";
    users = {
      homeassistant = {
        password = lib.fileContents <secrets/mosquitto/password>;
        acl = [ "topic readwrite #" ];
      };
      zigbee = {
        password = lib.fileContents <secrets/zigbee/password>;
        acl = [ "topic readwrite #" ];
      };
    };
  };

}