diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index ca44a32..f5409fc 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -51,8 +51,12 @@ spec:
               value: public
             - name: KC_HOSTNAME
               value: sso.bstein.dev
+            - name: KC_HOSTNAME_URL
+              value: https://sso.bstein.dev
             - name: KC_PROXY
               value: edge
+            - name: KC_PROXY_HEADERS
+              value: xforwarded
             - name: KC_HTTP_ENABLED
               value: "true"
             - name: KC_HTTP_MANAGEMENT_PORT