diff --git a/.env b/.env
index ca1a261e4..092704c9d 100644
--- a/.env
+++ b/.env
@@ -449,6 +449,9 @@ KC_REALM_USER_EVENT_EXPIRATION=604800
 KC_REALM_ADMIN_EVENT_ENABLED=false
 KC_REALM_ADMIN_EVENT_EXPIRATION=604800
 
+# Keycloak proxy headers: "xforwarded", "forwarded", or empty if no proxy
+KC_PROXY_HEADERS=
+
 # @category auth
 # for second Identity Provider
 KEYCLOAK2_DB_NAME=keycloak2
diff --git a/docker-compose.yml b/docker-compose.yml
index d1f8b3094..a842bd73a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -930,7 +930,7 @@ services:
       - KC_LOGIN_DISPLAY_DASHBOARD_LINK
       - KC_HEALTH_ENABLED=true
       - KC_HTTP_ENABLED=true
-      - KC_PROXY_HEADERS=xforwarded
+      - KC_PROXY_HEADERS
       - KC_PROXY_TRUSTED_ADDRESSES=${TRUSTED_PROXIES}
       - KC_BOOTSTRAP_ADMIN_USERNAME=${KEYCLOAK_ADMIN}
       - KC_BOOTSTRAP_ADMIN_PASSWORD=${KEYCLOAK_ADMIN_PASSWORD}