From 141c05b08f4f23e875efbc705da0a524eb5eab93 Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Sat, 6 Dec 2025 01:23:07 -0300
Subject: [PATCH] keycloak: honor xforwarded headers and hostname url

---
 services/keycloak/deployment.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/services/keycloak/deployment.yaml b/services/keycloak/deployment.yaml
index ca44a32..f5409fc 100644
--- a/services/keycloak/deployment.yaml
+++ b/services/keycloak/deployment.yaml
@@ -51,8 +51,12 @@ spec:
               value: public
             - name: KC_HOSTNAME
               value: sso.bstein.dev
+            - name: KC_HOSTNAME_URL
+              value: https://sso.bstein.dev
             - name: KC_PROXY
               value: edge
+            - name: KC_PROXY_HEADERS
+              value: xforwarded
             - name: KC_HTTP_ENABLED
               value: "true"
             - name: KC_HTTP_MANAGEMENT_PORT