diff --git a/machines/core-security/default.nix b/machines/core-security/default.nix
index bed3c65..aa01922 100644
--- a/machines/core-security/default.nix
+++ b/machines/core-security/default.nix
@@ -67,8 +67,8 @@
       hostname = "auth.julienmalka.me";
       hostname-admin-url = "https://auth.julienmalka.me";
       http-port = 8080;
-      hostname-strict-backchannel = true;
-      proxy = "edge";
+      hostname-backchannel-dynamic = true;
+      proxy-headers = "forwarded";
     };
     themes = {
       keywind = pkgs.keycloak-keywind;