Managed to spin up owntracks with mtls on android-mosquitto connection also the browser-recorder webui connection I was unable to enable tls on the recorder-mosquitto connection. Just basic auth. But I think the setup is secure enough as recorder connects to mosquitto only in the local network

Please have a look

https://ippocratis.github.io/p/owntracks/

Thanks