diff --git a/hosts/containers/keycloak/default.nix b/hosts/containers/keycloak/default.nix
index 01e17712..baa03942 100644
--- a/hosts/containers/keycloak/default.nix
+++ b/hosts/containers/keycloak/default.nix
@@ -20,7 +20,7 @@ in
   };
 
   # http https
-  networking.firewall.allowedTCPPorts = [ 77 443 ];
+  networking.firewall.allowedTCPPorts = [ 80 443 ];
 
   services.nginx = {
     enable = true;
@@ -49,7 +49,7 @@ in
     frontendUrl = "https://${frontendDomain}/auth";
     forceBackendUrlToFrontendUrl = true;
     httpPort = "${jboss.http.port = 8080}";
-    bindAddress = "127.0.0.1";
+    bindAddress = "${jboss.bind.address = "127.0.0.1"}";
     # sslCertificate = "/var/lib/acme/${frontendDomain}/fullchain.pem";
     # sslCertificateKey = "/var/lib/acme/${frontendDomain}/key.pem";
     database.passwordFile = builtins.toFile "db_password" dbPassword;