When you create your configuration file as you describe, you have not included any means of authentication and you must do this otherwise no clients will be able to authenticate. Either choose an authentication method - password file or plugin (mosquitto dynamic security, mosquitto-go-auth for example), or set `allow_anonymous true` if you do not need authentication.