<?php

return [
    // WebSocket URL the frontend's mqtt.js client connects to.
    'ws_url' => env('MQTT_WS_URL', 'ws://localhost:9001'),

    // Static per-role Mosquitto credentials (first-pass ACL model — see
    // docker/mosquitto/acl.conf for the documented per-user-isolation
    // limitation this implies).
    'role_credentials' => [
        'admin' => [
            'username' => env('MQTT_ROLE_ADMIN_USERNAME'),
            'password' => env('MQTT_ROLE_ADMIN_PASSWORD'),
        ],
        'manager' => [
            'username' => env('MQTT_ROLE_MANAGER_USERNAME'),
            'password' => env('MQTT_ROLE_MANAGER_PASSWORD'),
        ],
        'user' => [
            'username' => env('MQTT_ROLE_USER_USERNAME'),
            'password' => env('MQTT_ROLE_USER_PASSWORD'),
        ],
    ],
];