diff --git a/hosts/nachtigall/apps/keycloak.nix b/hosts/nachtigall/apps/keycloak.nix
index c5fc2f72..9db430b0 100644
--- a/hosts/nachtigall/apps/keycloak.nix
+++ b/hosts/nachtigall/apps/keycloak.nix
@@ -25,6 +25,7 @@
       "/" = {
         extraConfig = ''
           proxy_pass http://127.0.0.1:8080;
+          proxy_buffer_size 8k;
         '';
       };
     };
diff --git a/hosts/nachtigall/apps/nginx.nix b/hosts/nachtigall/apps/nginx.nix
index 65ad9886..5dd659c0 100644
--- a/hosts/nachtigall/apps/nginx.nix
+++ b/hosts/nachtigall/apps/nginx.nix
@@ -19,6 +19,10 @@ in {
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
+    appendHttpConfig = ''
+      # https://nginx.org/en/docs/hash.html
+      proxy_headers_hash_max_size 1024;
+    '';
   };
   
   security.acme = {