diff --git a/02_hetzner/03_baseline/keycloak/deployment.yaml b/02_hetzner/03_baseline/keycloak/deployment.yaml
index d719c66..24867a8 100644
--- a/02_hetzner/03_baseline/keycloak/deployment.yaml
+++ b/02_hetzner/03_baseline/keycloak/deployment.yaml
@@ -29,7 +29,7 @@
               - name: "KEYCLOAK_USER"
                 value: "admin" 
               - name: "KEYCLOAK_PASSWORD"
-                value: "admin"
+                value: "yEu2hr7j8WjYW2wXp3UQq6qN"
               - name: DB_VENDOR
                 value: postgres
               - name: DB_ADDR
@@ -40,6 +40,8 @@
                 value: keycloak
               - name: DB_PASSWORD
                 value: e7ov7xx45qr1erk9
+              - name: KEYCLOAK_FRONTEND_URL
+                value: https://kc.semapp.de/auth/
             ports: 
               - name: keycloak-http
                 containerPort: 8080
@@ -47,7 +49,7 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: keycloak-srv
+  name: kc-srv
   namespace: baseline-environment
 spec:
   selector:
@@ -68,22 +70,22 @@ metadata:
     kubernetes.io/ingress.class: "traefik"
 spec:
   rules:
-  - host:  keycloak.k8s.semprod.local
+  - host: kc.k8s.semprod.local
     http:
       paths:
       - backend:
           service:
-            name: keycloak-srv
+            name: kc-srv
             port:
               number: 8080
         path: /
         pathType: ImplementationSpecific
-  - host: keycloak.semprod.local
+  - host: kc.semapp.de
     http:
       paths:
       - backend:
           service:
-            name: keycloak-srv
+            name: kc-srv
             port:
               number: 8080
         path: /