diff --git a/lass/2configs/jitsi.nix b/lass/2configs/jitsi.nix
index fa41f6634..2c148dcdd 100644
--- a/lass/2configs/jitsi.nix
+++ b/lass/2configs/jitsi.nix
@@ -8,6 +8,16 @@
       enableWelcomePage = true;
       requireDisplayName = true;
       analytics.disabled = true;
+      startAudioOnly = true;
+      channelLastN = 4;
+      stunServers = [
+        # - https://www.kuketz-blog.de/jitsi-meet-server-einstellungen-fuer-einen-datenschutzfreundlichen-betrieb/
+        { urls = "turn:turn.matrix.org:3478?transport=udp"; }
+        { urls = "turn:turn.matrix.org:3478?transport=tcp"; }
+        # - services.coturn:
+        #{ urls = "turn:turn.${domainName}:3479?transport=udp"; }
+        #{ urls = "turn:turn.${domainName}:3479?transport=tcp"; }
+      ];
     };
     interfaceConfig = {
       SHOW_JITSI_WATERMARK = false;
@@ -17,6 +27,10 @@
     };
   };
 
+  services.jitsi-videobridge.config = {
+    org.jitsi.videobridge.TRUST_BWE = false;
+  };
+
   krebs.iptables.tables.filter.INPUT.rules = [
     { predicate = "-p tcp --dport 4443"; target = "ACCEPT"; }
     { predicate = "-p udp --dport 10000"; target = "ACCEPT"; }