user_id,password,is_superuser
# Broad-Announce M4 EMQX built-in-db bootstrap.
# Username format: <source_id>-<company_id> for sources, ingestd for
# the subscriber. Password == HMAC secret so the same secret can
# serve as both MQTT auth and per-message HMAC.
# The auth file is read once on first EMQX start; subsequent
# changes go through the EMQX HTTP API (/api/v5/authentication/...)
# and are persisted in Mnesia (lost on container restart, by design
# for M4 dev; M11 promotes this to a Postgres-backed backend).
#
# The default password_hash field is plain so the file is readable.
# Production should set `password_hash: salt,bcrypt` per user.
prom-prod-acme-001,s3cret-acme,false
grafana-globex-002,s3cret-globex,false
ingestd,ingestd-broker-only,false