diff --git a/hosts/containers/keycloak/default.nix b/hosts/containers/keycloak/default.nix
index 8cc1b4de..c7c88b41 100644
--- a/hosts/containers/keycloak/default.nix
+++ b/hosts/containers/keycloak/default.nix
@@ -12,7 +12,7 @@ in
   networking.defaultGateway = "172.20.73.1";
 
   # http https
-  networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedTCPPorts = [ 77 443 ];
 
   services.nginx = {
     enable = true;
@@ -21,7 +21,11 @@ in
       forceSSL = true;
       enableACME = true;
       locations."/" = {
-        proxyPass = "https://localhost:8446";
+        proxyPass = "https://localhost:8443";
+        # proxyWebsockets = true;
+      };
+      locations."/auth" = {
+        proxyPass = "https://localhost:8443/auth";
         # proxyWebsockets = true;
       };
     };