diff --git a/hosts/defiant/services/keycloak.nix b/hosts/defiant/services/keycloak.nix
index e4df1f5..0c46885 100644
--- a/hosts/defiant/services/keycloak.nix
+++ b/hosts/defiant/services/keycloak.nix
@@ -1,6 +1,7 @@
 { config, pkgs, lib, ... }:
 let
   cfg = config.services.keycloak.settings;
+  hostname = "iam.feal.no";
 in {
   sops.secrets."keycloak/postgres" = { };
 
@@ -16,7 +17,7 @@ in {
 
     settings = {
       cache = "local";
-      hostname = "https://iam.feal.no";
+      hostname = "https://${hostname}";
       hostname-backchannel-dynamic = false;
       http-enabled = true;
       http-host = "127.0.1.2";
@@ -26,7 +27,7 @@ in {
   };
 
   # The main reverse proxy is defined in ./nginx.nix
-  services.nginx.virtualHosts.${cfg.hostname} = {
+  services.nginx.virtualHosts.${hostname} = {
     locations."= /".return = "302 ${cfg.hostname}/realms/feal.no/account";
   };
 }