diff --git a/compose.yml b/compose.yml
index 32c4f7f..eeb9f0a 100644
--- a/compose.yml
+++ b/compose.yml
@@ -21,6 +21,7 @@ services:
       - KC_SPI_CONNECTIONS_JPA_LEGACY_MIGRATION_STRATEGY=update
       - KEYCLOAK_ADMIN=${ADMIN_USERNAME}
       - KEYCLOAK_WELCOME_THEME=${WELCOME_THEME}
+      - KC_PROXY_HEADERS=xforwarded
     # NOTE(3wc): disabled due to missing curl binary, see
     #   https://git.coopcloud.tech/coop-cloud/keycloak/issues/15
     # healthcheck: