diff --git a/roles/keycloak/defaults/main.yml b/roles/keycloak/defaults/main.yml
index 1bcdf1a1..8623e02f 100644
--- a/roles/keycloak/defaults/main.yml
+++ b/roles/keycloak/defaults/main.yml
@@ -75,6 +75,9 @@ keycloak_spec_defaults:
           }
         )
     }}
+  # Configure Keycloak to respect the xforwarded headers from the ingress controller
+  proxy:
+    headers: xforwarded
   # We will do our own ingress with TLS annotations
   ingress:
     enabled: false