diff --git a/hosts/containers/keycloak/default.nix b/hosts/containers/keycloak/default.nix
index 9f83d436..4896e4af 100644
--- a/hosts/containers/keycloak/default.nix
+++ b/hosts/containers/keycloak/default.nix
@@ -48,8 +48,8 @@ in
     inherit (pkgs.keycloak-secrets) initialAdminPassword;
     frontendUrl = "https://${frontendDomain}/auth";
     forceBackendUrlToFrontendUrl = true;
-    httpPort = "${jboss.http.port:8080}";
-    bindAddress = "${jboss.bind.address:127.0.0.1}";
+    httpPort = "\${jboss.http.port:8080}";
+    bindAddress = "\${jboss.bind.address:127.0.0.1}";
     # sslCertificate = "/var/lib/acme/${frontendDomain}/fullchain.pem";
     # sslCertificateKey = "/var/lib/acme/${frontendDomain}/key.pem";
     database.passwordFile = builtins.toFile "db_password" dbPassword;