diff --git a/docker-compose.yaml b/docker-compose.yaml
index f694f30..72f7e36 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -50,10 +50,6 @@ services:
       # Basic Auth Definition
       - "traefik.http.middlewares.dashboard-auth.basicauth.users=admin:$$apr1$$xyz$$..."
       
-      # Keycloak ForwardAuth Middleware (bereitgestellt, aber aktuell nicht im Router zugewiesen)
-      - "traefik.http.middlewares.keycloak-oauth2.forwardauth.address=http://<OAUTH2_PROXY_URL>/oauth2/auth"
-      - "traefik.http.middlewares.keycloak-oauth2.forwardauth.trustForwardHeader=true"
-      - "traefik.http.middlewares.keycloak-oauth2.forwardauth.authResponseHeaders=X-Auth-Request-User,X-Auth-Request-Email"
     healthcheck:
       test: ["CMD", "traefik", "healthcheck"]
       interval: 10s
diff --git a/dynamic.yaml b/dynamic.yaml
index 0cec2ee..7fa2acd 100644
--- a/dynamic.yaml
+++ b/dynamic.yaml
@@ -25,3 +25,10 @@ http:
         status: "500-599"
         service: errorpages-backend
         query: "/{status}.html"
+    keycloak-oauth2:
+      forwardAuth:
+        address: http://oauth2-proxy:4180/oauth2/auth
+        trustForwardHeader: true
+        authResponseHeaders:
+          - X-Auth-Request-User
+          - X-Auth-Request-Email