Functioning mqtt ingestion and db write, formating changes, device manager initiated

infrastructure/compose.yml

@@ -13,8 +13,9 @@ services:
     ports:
       - "1883:1883"
       - "9001:9001"
+      - "8883:8883"
     volumes:
-      - ./mosquitto/mosquitto.conf:/mosquitto/config/mosquitto.conf
+      - ./mosquitto/:/mosquitto/config/
     restart: unless-stopped
   
   timescaledb:
@@ -31,4 +32,4 @@ services:
 
 volumes:
   redis-data:
-  timescaledb-data:
+  timescaledb-data:

infrastructure/mosquitto/mosquitto.conf

@@ -1,2 +1,17 @@
-allow_anonymous true
+# Standard MQTT listener (for testing without certs)
 listener 1883 0.0.0.0
+allow_anonymous true
+
+# mTLS listener (requires client certificates)
+listener 8883 0.0.0.0
+protocol mqtt
+
+# Certificate-based authentication
+require_certificate true
+use_identity_as_username true
+
+# CA certificate to verify client certificates
+cafile /mosquitto/config/ca.crt
+
+# Optional: TLS version restrictions
+tls_version tlsv1.2