diff --git a/idci/keycloak-security-bundle/1.0/config/packages/idci_keycloak_security.yaml b/idci/keycloak-security-bundle/1.0/config/packages/idci_keycloak_security.yaml
index 9562de18..76d2186a 100644
--- a/idci/keycloak-security-bundle/1.0/config/packages/idci_keycloak_security.yaml
+++ b/idci/keycloak-security-bundle/1.0/config/packages/idci_keycloak_security.yaml
@@ -1,6 +1,9 @@
 idci_keycloak_security:
-    server_url: 'http://localhost:8080/auth'
-    realm: 'realm-name'
-    client_id: 'my-client-id'
-    client_secret: 'my-client-secret'
+    server_url: '%env(resolve:KEYCLOAK_SERVER_BASE_URL)%/auth'
+    server_public_url: '%env(resolve:KEYCLOAK_SERVER_PUBLIC_BASE_URL)%/auth'
+    server_private_url: '%env(resolve:KEYCLOAK_SERVER_PRIVATE_BASE_URL)%/auth'
+    realm: '%env(resolve:KEYCLOAK_REALM)%'
+    client_id: '%env(resolve:KEYCLOAK_CLIENT_ID)%'
+    client_secret: '%env(resolve:KEYCLOAK_CLIENT_SECRET)%'
     default_target_path: 'app_home'
+    ssl_verification: true
diff --git a/idci/keycloak-security-bundle/1.0/manifest.json b/idci/keycloak-security-bundle/1.0/manifest.json
index bf0cecb5..12aa2e35 100644
--- a/idci/keycloak-security-bundle/1.0/manifest.json
+++ b/idci/keycloak-security-bundle/1.0/manifest.json
@@ -4,5 +4,13 @@
     },
     "copy-from-recipe": {
         "config/": "%CONFIG_DIR%/"
+    },
+    "env": {
+        "KEYCLOAK_SERVER_BASE_URL": "http://keycloak:8080",
+        "KEYCLOAK_SERVER_PUBLIC_BASE_URL": "${KEYCLOAK_SERVER_BASE_URL}",
+        "KEYCLOAK_SERVER_PRIVATE_BASE_URL": "${KEYCLOAK_SERVER_BASE_URL}",
+        "KEYCLOAK_REALM": "",
+        "KEYCLOAK_CLIENT_ID": "",
+        "KEYCLOAK_CLIENT_SECRET": ""
     }
 }