about MQTT

[ortegafernando]

Hi Alexander, sorry for contact you here, but I dont find any other way.

It is about this explanation: https://akeil.de/posts/mqtt-bridge-with-mosquitto-and-nginx.html

I have to do what you have explain, but I dont know how to do one thing.

I have a cloud server (google cloud) with nodered, grafana and a mosquitto broker. I have also it encrypted with lets encrypt and certbot cron job. It works perfectly.

In order to improve my security, I want to configure a local broker in my home, but it will be "bridged" with my "cloud broker".

My question is about this:

# must specify cafile to enable SSL
bridge_cafile /etc/ssl/certs/DST_Root_CA_X3.pem

I am a newbee, and I know that my certificate files are in my cloud server.

1. First question is: which is the file that I have to copy from cloud server to my local broker? Or is it not necessary?
2. And my second question is: In case I have to copy one file, how could I do to update it in my local mqtt "bridged" broker? Certbot cron job (lets encrypt) updates certificate every 60 days, so .... do I need to download again every 60 days from my cloud server to my locak mqtt broker?

I don't understand it well. Please, tell me, thanks.

NOTE: if you prefer, you could send me an email to my github profile: ortega.fernando@gmail.com.

THANKS A LOT.