diff --git a/instances/heimdall/configuration.nix b/instances/heimdall/configuration.nix
index f41a7a3..4992678 100644
--- a/instances/heimdall/configuration.nix
+++ b/instances/heimdall/configuration.nix
@@ -74,12 +74,24 @@ in
   services = {
     mosquitto = {
       enable = true;
+      # listeners = [{
+      #   address = "127.0.0.1";
+      #   port = 1883;
+      #   users.zigbee2mqtt = {
+      #     acl = [ "pattern readwrite #" ];
+      #     omitPasswordAuth = true;
+      #   };
+      # }];
       listeners = [{
         address = "127.0.0.1";
         port = 1883;
-        users.zigbee2mqtt = {
-          acl = [ "pattern readwrite #" ];
-          omitPasswordAuth = true;
+        users.iotdevice = {
+          acl = [
+            "read IoT/device/action"
+            "write IoT/device/observations"
+            "write IoT/device/LW"
+          ];
+          password = "mysweetpassword-or-use-hashedPassword";
         };
       }];
     };