diff --git a/hosts/plover/default.nix b/hosts/plover/default.nix
index 33a7d7fd..ffd0c792 100644
--- a/hosts/plover/default.nix
+++ b/hosts/plover/default.nix
@@ -158,8 +158,12 @@ in
       "${codeForgeDomain}" = {
         forceSSL = true;
         enableACME = true;
-        locations."/" = {
-          proxyPass = "http://localhost:${toString config.services.gitea.httpPort}";
+        locations = let
+          keycloakPath = path: "http://localhost:${toString config.services.gitea.httpPort}${path}";
+        in {
+          "/realms".proxyPass = keycloakPath "/realms";
+          "/resources".proxyPass = keycloakPath "/resources";
+          "/robots.txt".proxyPass = keycloakPath "/robots.txt";
         };
       };