The full mosquitto.conf (2026-09-30) has a single plain listener on 1883, used by the boards. The phone app sends a Firebase ID token as its MQTT password, so a TLS listener must be added before app users go live. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>