diff --git a/modules/servers/tyr/default.nix b/modules/servers/tyr/default.nix
index 1fe68cf..0847372 100644
--- a/modules/servers/tyr/default.nix
+++ b/modules/servers/tyr/default.nix
@@ -9,5 +9,6 @@
     ./dns.nix
     ./traefik.nix
     ./home-assistant.nix
+    ./mosquitto.nix
   ];
 }
diff --git a/modules/servers/tyr/mosquitto.nix b/modules/servers/tyr/mosquitto.nix
new file mode 100644
index 0000000..179f2c8
--- /dev/null
+++ b/modules/servers/tyr/mosquitto.nix
@@ -0,0 +1,18 @@
+{
+  services.mosquitto = {
+    enable = true;
+    listeners = [
+      {
+        users.crony = {
+          acl = ["readwrite #"];
+          hashedPassword = "$7$101$3MqAfbz8vp9VMrMG$nvHnl1fEX1H3JeH98JGBjdBiKZ02RW7kSBMSQK2fHzU+3hinebJxW8QMpdaH9TYKoeM9PS0y+pzvYnrk0/tkIQ==";
+        };
+      }
+    ];
+  };
+
+  networking.firewall = {
+    enable = true;
+    allowedTCPPorts = [1883];
+  };
+}