# 不带证书
stream {

    upstream mqtt_server {
        server 192.168.0.111:1883;
    }

    server {
        listen 19000;
        proxy_pass mqtt_server;
        server_name {域名};
    }
}

# 带证书配置
stream {
    upstream mqtt_server {
        server 192.168.0.111:1883;  # 后端MQTT Broker
    }

    server {
        listen 18883 ssl;
        ssl_certificate /etc/nginx/ssl/mqtt.crt;
        ssl_certificate_key /etc/nginx/ssl/mqtt.key;
        proxy_pass mqtt_server;
        server_name {域名};
        # 安全增强
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384';
    }
}

配置好后 可以使用 mqttx 连接调试  mqtt://  对应的其实是 tcp://