diff --git a/nginx/sa.conf b/nginx/sa.conf
index 0a20f36..4022254 100644
--- a/nginx/sa.conf
+++ b/nginx/sa.conf
@@ -30,6 +30,16 @@
         fastcgi_index index.php;
         fastcgi_param SCRIPT_FILENAME /var/www/html$fastcgi_script_name;
     }
+
+    location /auth/ {   # Gerrit adds this prefix for Keycloak...
+        rewrite ^/auth(.*)$ $1 last;
+    }
+
+    location / {
+        proxy_pass          http://keycloak:8080;
+        proxy_set_header    X-Forwarded-For $remote_addr;
+        proxy_set_header    Host $host;
+    }
 }
 
 server {