diff --git a/root_keycloak.tf b/root_keycloak.tf
index ad0eb36..292e70a 100644
--- a/root_keycloak.tf
+++ b/root_keycloak.tf
@@ -123,7 +123,7 @@ module "tdr_keycloak_ecs" {
     reporting_client_secret_path      = local.keycloak_reporting_client_secret_name
     rotate_client_secrets_client_path = local.keycloak_rotate_secrets_client_secret_name
     sns_topic_arn                     = module.notifications_topic.sns_arn
-    keycloak_host                     = "auth.${local.environment_domain}"
+    keycloak_host                     = "https://auth.${local.environment_domain}"
     block_shared_pages                = local.block_shared_keycloak_pages
   })
   container_name               = "keycloak"