🚧 WIP

2026-09-17 06:23:29 +02:00
parent 8d2c54beae
commit ee4800993d
17 changed files with 1043 additions and 189 deletions
@@ -0,0 +1,14 @@
+# Broker image: pinned upstream base + the platform bootstrap config.
+#
+# Why bake the config in instead of bind-mounting or entrypoint-copying:
+#   * A FRESH mosquitto_config volume gets seeded from the IMAGE content
+#     (Docker copy-up) — so first boot starts with OUR dynsec-enabled
+#     config, not the stock anonymous one.
+#   * Once the volume has content (bootstrap or deployed revisions), the
+#     image never touches it again — control-sidecar deploys survive
+#     restarts and image rebuilds.
+#   * Bind-mounting the active file would break the control sidecar's
+#     atomic os.replace() activation on deploy.
+FROM eclipse-mosquitto:2.1.2-alpine
+
+COPY bootstrap/mosquitto.conf /mosquitto/config/mosquitto.conf