diff --git a/system-config/services/containers/keycloak/default.nix b/system-config/services/containers/keycloak/default.nix
index 57a8f18..fa2db53 100644
--- a/system-config/services/containers/keycloak/default.nix
+++ b/system-config/services/containers/keycloak/default.nix
@@ -57,7 +57,9 @@
 
                         http-enabled = true;
 
-                        proxy = "passthrough";
+                        proxy-headers = "xforwarded";
+
+                        proxy-trusted-addresses = [ "192.168.100.11" ];
                     };
 
                     initialAdminPassword = "7567";