diff --git a/template/stacks/core/forgejo/values.yaml b/template/stacks/core/forgejo/values.yaml
index 3d5a230..c1be3ca 100644
--- a/template/stacks/core/forgejo/values.yaml
+++ b/template/stacks/core/forgejo/values.yaml
@@ -36,7 +36,7 @@ gitea:
       key: 'forgejo'
       secret: 'nEJ7tmVYLjwuycF4vhBzCY8BVfk9LHDY'
       # existingSecret: gitea-credentials
-      autoDiscoverUrl: 'https://gitea.runner.c-one-infra.de/.well-known/openid-configuration'
+      autoDiscoverUrl: 'https://gitea.{{{ .Env.DOMAIN }}}/.well-known/openid-configuration'
 
 service:
   ssh:
diff --git a/template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml b/template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml
index 798c735..c6b407e 100644
--- a/template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml
+++ b/template/stacks/ref-implementation/keycloak/manifests/keycloak-config.yaml
@@ -200,10 +200,10 @@ data:
         "oidc.ciba.grant.enabled": false
       },
       "alwaysDisplayInConsole": false,
-      "rootUrl": "https://{{{ .Env.DOMAIN }}}",
+      "rootUrl": "https://gitea.{{{ .Env.DOMAIN }}}",
       "baseUrl": "",
       "redirectUris": [
-        "https://{{{ .Env.DOMAIN }}}/*"
+        "https://gitea.{{{ .Env.DOMAIN }}}/*"
       ],
       "webOrigins": [
         "/*"