diff --git a/etc/k8s/eshoponabp/charts/postgres/templates/postgres-deployment.yaml b/etc/k8s/eshoponabp/charts/postgres/templates/postgres-deployment.yaml
index a86da72b..073b6928 100644
--- a/etc/k8s/eshoponabp/charts/postgres/templates/postgres-deployment.yaml
+++ b/etc/k8s/eshoponabp/charts/postgres/templates/postgres-deployment.yaml
@@ -28,6 +28,8 @@ spec:
           env:
           - name: POSTGRES_PASSWORD
             value: "myPassw0rd"
+          - name: POSTGRES_DB
+            value: "keycloak"
 {{- if eq .Release.Name "eshop-az" }}
   volumeClaimTemplates:
   - metadata:
diff --git a/etc/k8s/eshoponabp/values.st.yaml b/etc/k8s/eshoponabp/values.st.yaml
index 992033d7..58aa1d10 100644
--- a/etc/k8s/eshoponabp/values.st.yaml
+++ b/etc/k8s/eshoponabp/values.st.yaml
@@ -1,20 +1,30 @@
 # auth-server sub-chart override
 keycloak:
   config:
-    dbVendor: postgres
-    dbAddr: eshop-st-postgresdb
-    dbDatabase: keycloak
-    dbUser: postgres
-    dbPassword: myPassw0rd
+    kcDb: postgres
+    kcDbUrl: jdbc:postgresql://eshop-st-postgresdb:5432/keycloak
+    kcDbUrlHost: eshop-st-postgresdb
+    kcDbUrlPort: 5432
+    kcDbUrlDatabase: keycloak
+    kcDbUsername: postgres
+    kcDbPassword: myPassw0rd
     keycloakAdmin: admin
     keycloakAdminPassword: 1q2w3E*
     kcHealthEnabled: true
+    kcHttpRelativePath : /
+    kcProxy: edge
+    proxyAddressForwarding: true
+    kcHttpEnabled: true
+    kcHostnameUrl: https://account.eshoponabp.dev
+    kcHostnameAdminUrl: https://account.eshoponabp.dev
+    jgroupsDnsQuery: eshop-st-keycloak
+
   ingress:
     host: account.eshoponabp.dev
     tlsSecret: eshop-wildcard-tls
   image:
     repository: quay.io/keycloak/keycloak
-    tag: 19.0.2
+    tag: 21.1.1
     pullPolicy: IfNotPresent
 
 # web sub-chart override