MQTT at fleet scale: what a few thousand IoT devices and one bad Postgres password taught us

A misconfigured Postgres credential turned an ordinary EMQX cluster into a 50,000-connection-attempt-per-minute self-DDoS. Here is what we changed about authentication, observability, and runbook design after that night.