MQTT Brokers


The MQTT component needs you to run an MQTT broker for Home Assistant to connect to. There are four options, each with various degrees of ease of setup and privacy.

Embedded broker

Home Assistant contains an embedded MQTT broker. If no broker configuration is given, the HBMQTT broker is started and Home Assistant connects to it. Embedded broker default configuration:

Setting Value
Host localhost
Port 1883
Protocol 3.1.1
User homeassistant
Password Your API password
Websocket port 8080
# Example configuration.yaml entry
mqtt:

Owntracks

To use Owntracks with the internal broker a small configuration change must be made in order for the app to use MQTT protocol 3.1.1 (Protocol Level 4).

In the Owntracks preferences (Android: v1.2.3+, iOS: v9.5.1+) open Configuration Management; Find the value named mqttProtocolLevel and set the value to 4. The application will now use MQTT 3.1.1 to connect, which is compatible with the embedded broker.

Settings

If you want to customize the settings of the embedded broker, use embedded: and the values shown in the HBMQTT Broker configuration. This will replace the default configuration.

# Example configuration.yaml entry
mqtt:
  embedded:
    # Your HBMQTT config here. Example at:
    # http://hbmqtt.readthedocs.org/en/latest/references/broker.html#broker-configuration

Run your own

This is the most private option but requires a bit more work. There are multiple free and open-source brokers to pick from: eg. Mosquitto, EMQ, or Mosca.

# Example configuration.yaml entry
mqtt:
  broker: 192.168.1.100

Configuration variables:

  • broker (Optional): The IP address or hostname of your MQTT broker, e.g. 192.168.1.32.
  • port (Optional): The network port to connect to. Default is 1883.
  • client_id (Optional): The client ID that Home Assistant will use. Has to be unique on the server. Default is a randomly generated one.
  • keepalive (Optional): The time in seconds between sending keep alive messages for this client. Default is 60.
  • username (Optional): The username to use with your MQTT broker.
  • password (Optional): The corresponding password for the username to use with your MQTT broker.
  • protocol (Optional): Protocol to use: 3.1 or 3.1.1. By default it connects with 3.1.1 and falls back to 3.1 if server does not support 3.1.1.
  • certificate (Optional): Path to the certificate file, eg. /home/user/.homeassistant/server.crt.
  • tls_insecure (Optional): Set the verification of the server hostname in the server certificate.
  • tls_version (Optional): TLS/SSL protocol version to use. Available options are: auto, 1.0, 1.1, 1.2. Defaults to auto.

There is an issue with the Mosquitto package included in Ubuntu 14.04 LTS. Specify protocol: 3.1 in your MQTT configuration to work around this issue. If you get this error AttributeError: module 'ssl' has no attribute 'PROTOCOL_TLS' then you need to set tls_version: 1.2.

If you are running a Mosquitto instance on a different server with proper SSL encryption using a service like Let’s Encrypt you may have to set the certificate to the operating systems own .crt certificates file. In the instance of Ubuntu this would be certificate: /etc/ssl/certs/ca-certificates.crt

Public broker

The Mosquitto project runs a public broker. This is the easiest to set up, but there is no privacy as all messages are public. Use this only for testing purposes and not for real tracking of your devices or controlling your home.

mqtt:
  broker: test.mosquitto.org
  port: 1883 or 8883

  # Optional, replace port 1883 with following if you want encryption
  # (doesn't really matter because broker is public)
  port: 8883
  # Download certificate from http://test.mosquitto.org/ssl/mosquitto.org.crt
  certificate: /home/paulus/downloads/mosquitto.org.crt

CloudMQTT

CloudMQTT is a hosted private MQTT instance that is free for up to 10 connected devices. This is enough to get started with for example OwnTracks and give you a taste of what is possible.

Home Assistant is not affiliated with CloudMQTT nor will receive any kickbacks.

  1. Create an account (no payment details needed)
  2. Create a new CloudMQTT instance (Cute Cat is the free plan)
  3. From the control panel, click on the Details button.
  4. Create unique users for Home Assistant and each phone to connect
    (CloudMQTT does not allow two connections from the same user)
    1. Under manage users, fill in username, password and click add
    2. Under ACLs, select user, topic #, check ‘read access’ and ‘write access’
  5. Copy the instance info to your configuration.yaml:
mqtt:
  broker: CLOUTMQTT_SERVER
  port: CLOUDMQTT_PORT
  username: CLOUDMQTT_USER
  password: CLOUDMQTT_PASSWORD

Home Assistant will automatically load the correct certificate if you connect to an encrypted channel of CloudMQTT (port range 20000-30000).