From 0f8e3bf3c4db11d6e1e31ccba1b135e6640ff439 Mon Sep 17 00:00:00 2001
From: Philip Haupt <“der.mad.mob@gmail.com”>
Date: Sat, 8 Nov 2025 17:19:34 +0100
Subject: [PATCH] keycloak hostname

---
 keycloak/main.yaml       | 4 ++--
 keycloak/src/values.yaml | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/keycloak/main.yaml b/keycloak/main.yaml
index 2f16520..6fab07c 100644
--- a/keycloak/main.yaml
+++ b/keycloak/main.yaml
@@ -126,7 +126,7 @@ spec:
         - /opt/keycloak/bin/kc.sh
         - start
         - --http-port=8080
-        - --hostname-strict=false
+        - --hostname https://iam.borninpain.de
         env:
         - name: KC_HTTP_RELATIVE_PATH
           value: /auth
@@ -135,7 +135,7 @@ spec:
         - name: KC_CACHE_STACK
           value: jdbc-ping
         - name: KC_PROXY_HEADERS
-          value: forwarded
+          value: xforwarded
         - name: KC_HTTP_ENABLED
           value: "true"
         - name: KC_DB
diff --git a/keycloak/src/values.yaml b/keycloak/src/values.yaml
index 92e54df..5612bcc 100644
--- a/keycloak/src/values.yaml
+++ b/keycloak/src/values.yaml
@@ -109,7 +109,7 @@ command:
   - "/opt/keycloak/bin/kc.sh"
   - "start"
   - "--http-port=8080"
-  - "--hostname-strict=false"
+  - "--hostname https://iam.borninpain.de"
 
 ## Overrides the default args for the Keycloak container
 args: []
@@ -426,7 +426,7 @@ cache:
 
 proxy:
   enabled: true
-  mode: forwarded
+  mode: xforwarded
   http:
     enabled: true