keycloak hostname

keycloak/main.yaml

@@ -126,7 +126,7 @@ spec:
         - /opt/keycloak/bin/kc.sh
         - start
         - --http-port=8080
-        - --hostname-strict=false
+        - --hostname https://iam.borninpain.de
         env:
         - name: KC_HTTP_RELATIVE_PATH
           value: /auth
@@ -135,7 +135,7 @@ spec:
         - name: KC_CACHE_STACK
           value: jdbc-ping
         - name: KC_PROXY_HEADERS
-          value: forwarded
+          value: xforwarded
         - name: KC_HTTP_ENABLED
           value: "true"
         - name: KC_DB

keycloak/src/values.yaml

@@ -109,7 +109,7 @@ command:
   - "/opt/keycloak/bin/kc.sh"
   - "start"
   - "--http-port=8080"
-  - "--hostname-strict=false"
+  - "--hostname https://iam.borninpain.de"
 
 ## Overrides the default args for the Keycloak container
 args: []
@@ -426,7 +426,7 @@ cache:
 
 proxy:
   enabled: true
-  mode: forwarded
+  mode: xforwarded
   http:
     enabled: true