diff --git a/drb-c2-core/mosquitto/entrypoint.sh b/drb-c2-core/mosquitto/entrypoint.sh
index 78bb52b..27d17ce 100644
--- a/drb-c2-core/mosquitto/entrypoint.sh
+++ b/drb-c2-core/mosquitto/entrypoint.sh
@@ -9,7 +9,7 @@
 #   MQTT_NODE_PASS — shared password for all edge nodes
 set -e
 
-PASSWD_FILE=/mosquitto/data/passwd
+PASSWD_FILE=/tmp/passwd
 
 # Remove any stale file so we start clean on every container start
 rm -f "$PASSWD_FILE"
diff --git a/drb-c2-core/mosquitto/mosquitto.conf b/drb-c2-core/mosquitto/mosquitto.conf
index 5ff9c51..ef97cdf 100644
--- a/drb-c2-core/mosquitto/mosquitto.conf
+++ b/drb-c2-core/mosquitto/mosquitto.conf
@@ -2,7 +2,7 @@ listener 1883
 allow_anonymous false
 
 # Credentials and ACLs are generated/mounted at container startup
-password_file /mosquitto/data/passwd
+password_file /tmp/passwd
 acl_file      /mosquitto/config/acl.conf
 
 # Persist retained messages (e.g. api_key, node status) across broker restarts