diff --git a/.env.sample b/.env.sample
index 76d17ec..a49ecd6 100644
--- a/.env.sample
+++ b/.env.sample
@@ -44,8 +44,6 @@ LETS_ENCRYPT_ENV=production
 #KEYCLOAK_ENABLED=1
 #COMPOSE_FILE="$COMPOSE_FILE:compose.keycloak.yml"
 #OAUTH_CLIENT_ID=writefreely
-#OAUTH_HOST=
-#OAUTH_CLIENT_SECRET=
-#OAUTH_LOGIN_BUTTON=
-#OAUTH_WRITEFREELY_VERSION=v1
+#OAUTH_HOST=https://<your domain>/auth/realms/<your realm>/protocol/openid-connect
+#OAUTH_DISPLAY_NAME=Keycloak
 #OAUTH_CLIENT_SECRET_VERSION=v1
diff --git a/README.md b/README.md
index e293c1a..03f78e7 100644
--- a/README.md
+++ b/README.md
@@ -32,7 +32,9 @@ abra app run <domain> app -- writefreely -c /usr/share/writefreely/config.ini us
 
 ## Keycloak setup
 
-For the **OAUTH_HOST** config, it uses this format: `https://keycloak.domain.here/auth/realms/<your realm>/protocol/openid-connect`.
+For the **OAUTH_HOST** config, it uses this format: `https://keycloak.example.com/auth/realms/<your realm>/protocol/openid-connect`.
+
+To set the client secret: `abra app secret insert <domain> oauth_client_secret v1`
 
 ## MariaDB