diff --git a/manifest/overlays/production/keycloak-instance.yaml b/manifest/overlays/production/keycloak-instance.yaml
index 75f3d3a..7bacba1 100644
--- a/manifest/overlays/production/keycloak-instance.yaml
+++ b/manifest/overlays/production/keycloak-instance.yaml
@@ -35,7 +35,7 @@ spec:
   # ── Hostname ──────────────────────────────────────────────────────────────
   hostname:
     hostname: login.olb42.com
-    admin: login.olb42.com
+    # admin omitted: defaults to same as hostname
     # strict=false: allow X-Forwarded-Host from Traefik
     strict: false
     strictBackchannel: false