# Minimal health-check client config used by `mosquitto_sub` in the
# compose healthcheck. It connects to the loopback listener anonymously
# only far enough to receive $SYS/broker/version — dynsec denies
# everything else for anonymous clients, which is fine: we only need the
# TCP + MQTT CONNECT handshake to succeed for the check.
#
# Kept separate from bootstrap/mosquitto.conf so the healthcheck does not
# depend on the generated/managed configuration at all.