diff --git a/internal/api/server.go b/internal/api/server.go
index 7ed50d1..f8f3248 100644
--- a/internal/api/server.go
+++ b/internal/api/server.go
@@ -191,6 +191,7 @@ func (s *Server) routes() {
 	s.mux.HandleFunc("GET /api/health", s.handleHealth)
 	s.mux.HandleFunc("GET /metrics", s.handleMetrics)
 	s.mux.HandleFunc("GET /api/version", s.handleVersion)
+	s.mux.HandleFunc("GET /api/system/info", s.auth(s.handleSystemInfo))
 	s.mux.HandleFunc("POST /api/auth/login", s.handleLogin)
 	s.mux.HandleFunc("GET /api/auth/me", s.auth(s.handleMe))
 	s.mux.HandleFunc("POST /api/auth/logout", s.auth(s.handleLogout))
diff --git a/internal/api/system_info_handler.go b/internal/api/system_info_handler.go
new file mode 100644
index 0000000..9582e12
--- /dev/null
+++ b/internal/api/system_info_handler.go
@@ -0,0 +1,18 @@
+package api
+
+import "net/http"
+
+// handleSystemInfo liefert öffentliche System-Verbindungsdaten
+// (FQDN, IMAP-Port). Wird im Frontend für die IMAP-Zugang-Karte
+// auf der Settings-Seite verwendet.
+//
+// GET /api/system/info — auth required (Endpoint zeigt nur generische,
+// nicht-sensitive Verbindungsdaten an, ist aber an Login gebunden, um
+// öffentliches Profiling der Installation zu vermeiden).
+func (s *Server) handleSystemInfo(w http.ResponseWriter, r *http.Request) {
+	writeJSON(w, http.StatusOK, map[string]interface{}{
+		"fqdn":          s.fqdn,
+		"imap_port":     9993,
+		"imap_port_alt": 993,
+	})
+}
diff --git a/src/app/settings/page.tsx b/src/app/settings/page.tsx
index fa9cb22..dc6c2c0 100644
--- a/src/app/settings/page.tsx
+++ b/src/app/settings/page.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { useState } from "react";
+import { useEffect, useState } from "react";
 import { useAuth } from "@/hooks/useAuth";
 import { Navbar } from "@/components/navbar";
 import { Card, CardContent, CardHeader, CardTitle } from "@/components/ui/card";
@@ -23,6 +23,8 @@ import {
   getTOTPSetup,
   confirmTOTPSetup,
   disableTOTP,
+  getSystemInfo,
+  type SystemInfo,
 } from "@/lib/api";
 
 export default function SettingsPage() {
@@ -57,6 +59,28 @@ export default function SettingsPage() {
   const [disableError, setDisableError] = useState("");
   const [disableLoading, setDisableLoading] = useState(false);
 
+  // ── System info (FQDN + IMAP-Ports) ───────────────────────────────────
+  const [systemInfo, setSystemInfo] = useState<SystemInfo | null>(null);
+  const [systemInfoLoading, setSystemInfoLoading] = useState(true);
+
+  useEffect(() => {
+    let cancelled = false;
+    setSystemInfoLoading(true);
+    getSystemInfo()
+      .then((info) => {
+        if (!cancelled) setSystemInfo(info);
+      })
+      .catch(() => {
+        if (!cancelled) setSystemInfo(null);
+      })
+      .finally(() => {
+        if (!cancelled) setSystemInfoLoading(false);
+      });
+    return () => {
+      cancelled = true;
+    };
+  }, []);
+
   // Initialize email from user data once available
   if (user && !emailInitialized) {
     setEmail(user.email || "");
@@ -488,19 +512,30 @@ export default function SettingsPage() {
                 <Server className="h-3.5 w-3.5" aria-hidden="true" />
                 Server
               </span>
-              <span className="font-mono">192.168.1.131</span>
+              <span className="font-mono">
+                {systemInfoLoading
+                  ? "Laden..."
+                  : systemInfo?.fqdn ||
+                    (typeof window !== "undefined"
+                      ? window.location.hostname
+                      : "")}
+              </span>
 
               <span className="text-muted-foreground flex items-center gap-1.5">
                 <Lock className="h-3.5 w-3.5" aria-hidden="true" />
                 IMAP-Port
               </span>
-              <span className="font-mono">9993 (SSL/TLS)</span>
+              <span className="font-mono">
+                {systemInfo?.imap_port ?? 9993} (SSL/TLS)
+              </span>
 
               <span className="text-muted-foreground flex items-center gap-1.5">
                 <Lock className="h-3.5 w-3.5" aria-hidden="true" />
                 Alternativ-Port
               </span>
-              <span className="font-mono">993 (SSL/TLS)</span>
+              <span className="font-mono">
+                {systemInfo?.imap_port_alt ?? 993} (SSL/TLS)
+              </span>
 
               <span className="text-muted-foreground flex items-center gap-1.5">
                 <Lock className="h-3.5 w-3.5" aria-hidden="true" />
diff --git a/src/lib/api/index.ts b/src/lib/api/index.ts
index 4e7df6e..eafcdba 100644
--- a/src/lib/api/index.ts
+++ b/src/lib/api/index.ts
@@ -121,6 +121,7 @@ export {
 
 export type {
   HealthResponse,
+  SystemInfo,
   SMTPStatus,
   StorageStats,
   ServiceStatus,
@@ -142,6 +143,7 @@ export type {
 } from "./system";
 export {
   getHealth,
+  getSystemInfo,
   getSMTPStatus,
   getStorageStats,
   getSystemStats,
diff --git a/src/lib/api/system.ts b/src/lib/api/system.ts
index 89d67a0..4e1de81 100644
--- a/src/lib/api/system.ts
+++ b/src/lib/api/system.ts
@@ -6,6 +6,12 @@ export interface HealthResponse {
   status: string;
 }
 
+export interface SystemInfo {
+  fqdn: string;
+  imap_port: number;
+  imap_port_alt: number;
+}
+
 export interface SMTPStatus {
   // global daemon fields (superadmin)
   running?: boolean;
@@ -157,6 +163,10 @@ export async function getHealth(): Promise<HealthResponse> {
   return request<HealthResponse>("/api/health");
 }
 
+export async function getSystemInfo(): Promise<SystemInfo> {
+  return request<SystemInfo>("/api/system/info");
+}
+
 export async function getSMTPStatus(): Promise<SMTPStatus> {
   return request<SMTPStatus>("/api/admin/smtp/status");
 }