diff --git a/manifest/overlays/production/argocd-cm-patch.yaml b/manifest/overlays/production/argocd-cm-patch.yaml
index f90f005..e0d9f4a 100644
--- a/manifest/overlays/production/argocd-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-cm-patch.yaml
@@ -96,11 +96,12 @@ data:
       - UpdateRequest
   url: https://argocd.olb42.com
   oidc.config: |
-    name: Zitadel
-    issuer: "https://auth.olb42.com"
+    name: Keycloak
+    issuer: https://cloak.olb42.com/realms/home-lab
     clientID: "371517213338829947"
     clientSecret: $oidc.auth.clientSecret
+    refreshTokenThreshold: 2m
     requestedScopes: ["openid", "profile", "email", "groups"]
-    requestedIDTokenClaims: {"groups": {"essential": true}}
-    enablePKCEAuthentication: true
-    logoutURL: https://auth.olb42.com/oidc/v1/end_session
+    # requestedIDTokenClaims: {"groups": {"essential": true}}
+    # enablePKCEAuthentication: true
+    # logoutURL: https://auth.olb42.com/oidc/v1/end_session
diff --git a/manifest/overlays/production/argocd-rbac-cm-patch.yaml b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
index 48e899b..ee196d4 100644
--- a/manifest/overlays/production/argocd-rbac-cm-patch.yaml
+++ b/manifest/overlays/production/argocd-rbac-cm-patch.yaml
@@ -11,6 +11,7 @@ data:
     g, nick@olb42.com, role:admin
     g, argocd_administrators, role:admin
     g, argocd_users, role:readonly
+    g, ArgoCDAdmins, role:admin
     g, mcpserver, role:admin
     g, homepage, role:readonly
     g, role:admin, role:readonly