Help with client URLs

I started with keycloak to sso my first application which was Drupal (green 1 in image). I am partially the way there but also started to think about my second app which is Nextcloud (green 2 in the image) and it opened up some questions for me. The open question might be related to one of my problems.

In my client configuration I mistakenly called it DrupalSSO client name but that isn’t accurate since I am going to use it for more than just Drupal. Anyway. Here is the configuration

I am not using path based access (/auth) in my reverse proxy but am using hostname (https:keycloak.)

So what should I be using for my root and home URLs? As I move to my second app, it seems like I would use multiple Valid Redirect for my multiple apps. That would imply maybe I would use the core keycloak. url for the first two.

Is this right?

Thanks

Or do I set multiple clients within the same realm for my various applications? Now I am leaning that way.