Jitsi: JICOFO_ENABLE_AUTH=0 — модератор только из пропуска, гость не модератор

docker-compose.yml

@@ -106,9 +106,10 @@ services:
       XMPP_MUC_DOMAIN: muc.meet.jitsi
       XMPP_INTERNAL_MUC_DOMAIN: internal-muc.meet.jitsi
       JICOFO_AUTH_PASSWORD: '${JICOFO_AUTH_PASSWORD}'
-      ENABLE_AUTH: '1'
-      AUTH_TYPE: jwt
-      # Moderators come only from the pass (token_affiliation); a guest joining first must not become owner.
+      # Prosody checks the pass. Jicofo's own auth must be off: with it, jicofo makes every
+      # authenticated (= every JWT) participant a moderator, guests included.
+      # Moderators come only from the pass (prosody token_affiliation); nobody becomes owner automatically.
+      JICOFO_ENABLE_AUTH: '0'
       ENABLE_AUTO_OWNER: 'false'
     depends_on:
       - prosody