diff --git a/group_vars/all/main.yml b/group_vars/all/main.yml
index 4472c1a..57c22ab 100644
--- a/group_vars/all/main.yml
+++ b/group_vars/all/main.yml
@@ -3140,6 +3140,11 @@ dovecot_from_address:
 dovecot_reply_to:
 webmailer_address:
 
+# Dovecot auth listener (port 44444) for XMPP/Jitsi (Prosody) authentication.
+# Enable per host in host_vars. Firewall: see fw_dovecot_auth_service and
+# fw_dovecot_auth_allowed_networks_v4/_v6 (role ipt-server).
+dovecot_xmpp_listener: false
+
 # salutation: "O.OPEN\n
 #
 # --\n
diff --git a/host_vars/a.mx.oopen.de/a.mx-common.yml b/host_vars/a.mx.oopen.de/a.mx-common.yml
index 1c19bcc..b544a0c 100644
--- a/host_vars/a.mx.oopen.de/a.mx-common.yml
+++ b/host_vars/a.mx.oopen.de/a.mx-common.yml
@@ -199,6 +199,9 @@ email_welcome_message: |
 
 # install_update_dovecot.conf
 #
+# Dovecot auth listener (port 44444) - used by Jitsi on meet.akweb.de
+dovecot_xmpp_listener: true
+
 dovecot_from_address: "o.open <oo@oopen.de>"
 dovecot_reply_to: "oo@oopen.de"
 webmailer_address: "https://webmail.oopen.de"
diff --git a/host_vars/e.mx.oopen.de/e.mx-common.yml b/host_vars/e.mx.oopen.de/e.mx-common.yml
index 01f2f5f..22d989d 100644
--- a/host_vars/e.mx.oopen.de/e.mx-common.yml
+++ b/host_vars/e.mx.oopen.de/e.mx-common.yml
@@ -196,6 +196,9 @@ email_welcome_message: |
 
 # install_update_dovecot.conf
 #
+# Dovecot auth listener (port 44444) - used by Jitsi on meet.oopen.de
+dovecot_xmpp_listener: true
+
 dovecot_from_address: "o.open <oo@oopen.de>"
 dovecot_reply_to: "oo@oopen.de"
 webmailer_address: "https://webmail-e.oopen.de"
diff --git a/roles/common/templates/usr/local/src/mailsystem/conf/install_update_dovecot.conf.j2 b/roles/common/templates/usr/local/src/mailsystem/conf/install_update_dovecot.conf.j2
index 98c6836..88a59e3 100644
--- a/roles/common/templates/usr/local/src/mailsystem/conf/install_update_dovecot.conf.j2
+++ b/roles/common/templates/usr/local/src/mailsystem/conf/install_update_dovecot.conf.j2
@@ -89,7 +89,9 @@ else
    pops_listener_adresses="$ipv4"
 fi
 
-xmpp_listener=false
+# - Auth listener for XMPP/Jitsi (Prosody authenticates users against Dovecot)
+# - set 'dovecot_xmpp_listener: true' in host_vars to enable it
+xmpp_listener={{ dovecot_xmpp_listener | default(false) | lower }}
 xmpp_listener_addresses="$ipv4 $ipv6"
 xmpp_listener_port="44444"