modules/servers/keycloak.nix

@@ -29,7 +29,7 @@ in
         createLocally = false;
         username = "keycloak";
         name = "keycloak";
-        passwordFile = config.sops.secrets."keycloak/db_password".path;
+        passwordFile = config.sops.secrets.postgres-password.path;
       };
       settings = {
         hostname = cfg.host;
@@ -37,7 +37,7 @@ in
         hostname-strict-https = false;
         http-enabled = true;
         http-port = cfg.port;
-        proxy = "edge";
+        proxy-headers = "xforwarded";
       };
     };
     systemd.services.keycloak.serviceConfig.EnvironmentFile = config.sops.secrets.keycloak.path;