diff --git a/container/Dockerfile b/container/Dockerfile
index c1250b4..e7267a8 100644
--- a/container/Dockerfile
+++ b/container/Dockerfile
@@ -1,6 +1,6 @@
 # https://www.keycloak.org/server/containers
 
-ARG KEYCLOAK_VERSION=25.0.1
+ARG KEYCLOAK_VERSION=26.0.5
 FROM quay.io/keycloak/keycloak:$KEYCLOAK_VERSION as builder
 
 ENV KC_DB=postgres
diff --git a/ecs-cluster/keycloak.tf b/ecs-cluster/keycloak.tf
index 2d10a3a..07c21cf 100644
--- a/ecs-cluster/keycloak.tf
+++ b/ecs-cluster/keycloak.tf
@@ -325,7 +325,7 @@ resource "aws_ecs_task_definition" "keycloak" {
       },
       # https://www.keycloak.org/server/reverseproxy
       # AWS load balancers set X-Forwarded not Forwarded
-      # https://docs.aws.amazon.com/elasticloadbalancing/latest/application/x-forwarded-headers.html
+      # https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/how-elastic-load-balancing-works.html
       {
         name  = "KC_PROXY_HEADERS"
         value = "xforwarded"