diff --git a/roles/prosody/templates/prosody.cfg.lua.j2 b/roles/prosody/templates/prosody.cfg.lua.j2
index f5851d37f5eeef538e4cd9e0edd372b42d9d2e5f..3ae1d3a8f24f2c731a9af60e5c74a2deda16dd45 100644
--- a/roles/prosody/templates/prosody.cfg.lua.j2
+++ b/roles/prosody/templates/prosody.cfg.lua.j2
@@ -32,6 +32,7 @@ modules_enabled = {
 
   -- Other specific functionality
     "announce"; -- Send announcement to all online users
+    "legacyauth"; -- Allow legacy authentication and SSL
 };
 
 -- Disable account creation by default, for security
@@ -45,6 +46,9 @@ ssl = {
   certificate = "{{ prosody_tls_certificate }}";
 }
 
+-- Ports on which to have direct TLS/SSL.
+legacy_ssl_ports = { 5223 }
+
 -- Force clients to use encrypted connection.
 c2s_require_encryption = true