diff --git a/prosody/appimage_aarch64.yml b/prosody/appimage_aarch64.yml
index 057772c1..77e5d88d 100644
--- a/prosody/appimage_aarch64.yml
+++ b/prosody/appimage_aarch64.yml
@@ -46,6 +46,7 @@ AppDir:
       - lua-event
       # lua-zlib is suggested. Not sure it is used, by make sense to add.
       - lua-zlib
+      - lua-sec
       - prosody
 
   files:
diff --git a/prosody/appimage_x86_64.yml b/prosody/appimage_x86_64.yml
index 74a0103b..0fe689d0 100644
--- a/prosody/appimage_x86_64.yml
+++ b/prosody/appimage_x86_64.yml
@@ -40,6 +40,7 @@ AppDir:
       - lua-event
       # lua-zlib is suggested. Not sure it is used, by make sense to add.
       - lua-zlib
+      - lua-sec
       - prosody/bullseye-backports
 
   files:
diff --git a/server/lib/prosody/config/content.ts b/server/lib/prosody/config/content.ts
index 4014c72e..acc97b3c 100644
--- a/server/lib/prosody/config/content.ts
+++ b/server/lib/prosody/config/content.ts
@@ -260,7 +260,9 @@ class ProsodyConfigContent {
   useRoomS2S (s2sPort: string, s2sInterfaces: string[]): void {
     this.global.set('s2s_ports', [s2sPort])
     this.global.set('s2s_interfaces', s2sInterfaces)
+    this.global.set('s2s_secure_auth', false)
     this.muc.add('modules_enabled', 's2s')
+    this.muc.add('modules_enabled', 'dialback') // This allows s2s connections without certicicates!
   }
 
   useExternalComponents (componentsPort: string, components: ExternalComponent[]): void {