infrastructure-provisioning/scripts/deploy_keycloak/templates/nginx.conf

server {
   listen external_port;

   location / {
       proxy_pass http://private_ip_address:internal_port;
       proxy_set_header Host $host;
       proxy_http_version 1.1;
       proxy_set_header X-Real-IP         $remote_addr;
       proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
       proxy_set_header X-Forwarded-Proto $scheme;

   }
}