* lookup of the keycloak container is at runtime to allow for the keycloak container being restarted while nginx is running * increased buffer sizes to permit for larger signed SAML exchanges (was required for Google Workspace)