diff --git a/docker-compose.yml b/docker-compose.yml
index 59e2568b..a3524840 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -227,7 +227,7 @@ services:
     environment:
       - DSN=cockroach://root@cockroach:26257/defaultdb?sslmode=disable&max_conns=20&max_idle_conns=4
       - LOG_LEVEL=trace
-      - SERVE_PUBLIC_BASE_URL=http://127.0.0.1/secure/.ory/kratos/public/
+      - SERVE_PUBLIC_BASE_URL=/secure/.ory/kratos/public/
       - SQA_OPT_OUT=true
     command: serve -c /etc/config/kratos/kratos.yml
     volumes:
@@ -256,8 +256,8 @@ services:
       - PORT=4435
       - SECURITY_MODE=jwks
       - PROJECT_NAME=Skynet
-      - BASE_URL=http://127.0.0.1/secure/
-      - KRATOS_BROWSER_URL=http://127.0.0.1/secure/.ory/kratos/public
+      - BASE_URL=/secure/
+      - KRATOS_BROWSER_URL=/secure/.ory/kratos/public
       - JWKS_URL=http://oathkeeper:4456/.well-known/jwks.json
       - KRATOS_PUBLIC_URL=http://kratos:4433/
       - KRATOS_ADMIN_URL=http://kratos:4434/
diff --git a/docker/nginx/conf.d/client.conf b/docker/nginx/conf.d/client.conf
index 0aaa6195..9bec0bec 100644
--- a/docker/nginx/conf.d/client.conf
+++ b/docker/nginx/conf.d/client.conf
@@ -349,7 +349,7 @@ server {
 
 	location /secure {
 		rewrite /secure/(.*) /$1 break;
-		proxy_redirect http://127.0.0.1/ /;
+		proxy_redirect http://127.0.0.1/ https://$host/;
 		proxy_pass http://oathkeeper:4455;
 	}