diff --git a/modules/keycloak.nix b/modules/keycloak.nix
index 458e192..cb9f986 100644
--- a/modules/keycloak.nix
+++ b/modules/keycloak.nix
@@ -15,6 +15,7 @@ with lib;
         https-port = 8788;
         http-enabled = true;
         hostname-strict-https = false;
+        proxy-headers = [ "forwarded" "xforwarded" ];
         # proxy = "passthrough";
       };
       database.passwordFile = "/keycloakbd";