# frontendUrl and adminUrl - how to restrict admin console to internal IP only? **URL:** \ **Category:** Configuring the server\ **Created:** [May 12, 2020, 6:12am UTC](https://forum.keycloak.org/t/frontendurl-and-adminurl-how-to-restrict-admin-console-to-internal-ip-only/2655 "2020-05-12T06:12:17Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Wukash](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/wukash/32/5091_2.png) [@Wukash](https://forum.keycloak.org/u/Wukash)\ **Post date:** [May 12, 2020, 6:12am UTC](https://forum.keycloak.org/t/frontendurl-and-adminurl-how-to-restrict-admin-console-to-internal-ip-only/2655/1 "2020-05-12T06:12:17Z")
We have keycloak behind reverse proxy. Now I would like admin console to only be accessible by internal IP (as suggested in the docs). So we set following variables when starting keycloak (sorry for the blank spaces - can’t paste links): frontendUrl = **https :// my . reverse-proxy . org /auth** adminUrl = **http :// 10.10.10.10 :8888 /auth** proxy\_address\_forwarding = true (using docker image if it matters) When starting keycloak, logs show that variables are correctly set: [org.keycloak.url.DefaultHostnameProviderFactory] Frontend: **https :// my . reverse-proxy . org /auth** , Admin: **http :// 10.10.10.10 :8888 /auth** , Backend: **request** However in this setup, when I navigate to **http :// 10.10.10.10 :8888 /auth/admin** , I am redirected to **https :// my . reverse-proxy. org /auth** /realms/master/protocol/openid-connect/auth?client\_id=security-admin-console&redirect\_uri=http :// 10.10.10.10: 8888 /auth/admin/master/console&… How do I tell keycloak that I should be redirected to internal IP, and not the configured frontendUrl? Feels like I’m missing something, but I tried every single combination and still out of luck. ---
**Author:** ![Wukash](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/wukash/32/5091_2.png) [@Wukash](https://forum.keycloak.org/u/Wukash)\ **Post date:** [May 14, 2020, 8:32am UTC](https://forum.keycloak.org/t/frontendurl-and-adminurl-how-to-restrict-admin-console-to-internal-ip-only/2655/2 "2020-05-14T08:32:34Z")
I had to also set “frontend URL” variable for master realm. This way you get redirected to IP when accessing admin console. You can set it using admin CLI or admin console: /opt/jboss/keycloak/bin/./kcadm.sh update realms/master -s attributes.frontendUrl=“[http://10.10.10.10:8888/auth](http://10.10.10.10:8888/auth)”