diff --git a/machines/thinkcentre/configuration.nix b/machines/thinkcentre/configuration.nix
index 443a6a4..8f3799a 100644
--- a/machines/thinkcentre/configuration.nix
+++ b/machines/thinkcentre/configuration.nix
@@ -77,14 +77,13 @@
   age.secrets.keycloakDb.file = ../../secrets/keycloak-db.age;
   services.keycloak = {
     enable = true;
-    package = pkgs.unstable.keycloak;
+    package = pkgs.keycloak;
     settings = {
-      hostname-url = "https://auth.s.michaelt.xyz";
-      hostname-admin-url = "https://auth.s.michaelt.xyz";
+      hostname = "https://auth.s.michaelt.xyz";
+      hostname-admin = "https://auth.s.michaelt.xyz";
       hostname-strict = false;
       hostname-strict-https = false;
-      # proxy-headers = "xforwarded";
-      proxy = "edge";
+      proxy-headers = "xforwarded";
       http-enabled = true;
       http-port = 7654;
     };