# Keycloak receives HTTP only from the trusted reverse proxy. KC_HTTP_ENABLED=true KC_PROXY_HEADERS=xforwarded KC_HOSTNAME=https://auth.example.test KC_HOSTNAME_STRICT=true