diff --git a/deploy/docker-compose.yml b/deploy/docker-compose.yml
index 64a7a56..6c3d52c 100644
--- a/deploy/docker-compose.yml
+++ b/deploy/docker-compose.yml
@@ -23,6 +23,7 @@ services:
       MONGO_URI: mongodb://mongo:27017/keymanager
       GITEA_HOST: ${GITEA_HOST}
       PUBLIC_HOST: ${PUBLIC_HOST}
+      GRPC_HOST: ${GRPC_HOST}
       GRPC_PORT: "9090"
       HTTP_PORT: "8080"
     depends_on:
diff --git a/server/internal/api/handlers.go b/server/internal/api/handlers.go
index 9424f4a..d306e61 100644
--- a/server/internal/api/handlers.go
+++ b/server/internal/api/handlers.go
@@ -210,6 +210,10 @@ func handleInstallScript(c *gin.Context) {
 	if publicHost == "" {
 		publicHost = "keymanager.example.com"
 	}
+	grpcHost := os.Getenv("GRPC_HOST")
+	if grpcHost == "" {
+		grpcHost = publicHost
+	}
 
 	script := fmt.Sprintf(`#!/usr/bin/env bash
 set -euo pipefail
@@ -220,6 +224,9 @@ GITEA_HOST="%s"
 KM_HOST="%s"
 KM_HOST="${KM_HOST#https://}"
 KM_HOST="${KM_HOST#http://}"
+GRPC_HOST="%s"
+GRPC_HOST="${GRPC_HOST#https://}"
+GRPC_HOST="${GRPC_HOST#http://}"
 
 ARCH=$(uname -m)
 case "$ARCH" in
@@ -261,7 +268,7 @@ mkdir -p /etc/keymanager
 chmod 0700 /etc/keymanager
 
 cat > /etc/keymanager/config.yaml <<EOF
-server_url: "${KM_HOST}:9090"
+server_url: "${GRPC_HOST}"
 server_id: "${SERVER_ID}"
 pre_reg_token: "${TOKEN}"
 agent_token: ""
@@ -289,7 +296,7 @@ systemctl daemon-reload
 systemctl enable --now keymanager-agent
 
 echo "keymanager-agent installed and started."
-`, serverID, token, giteaHost, publicHost)
+`, serverID, token, giteaHost, publicHost, grpcHost)
 
 	c.Header("Content-Type", "text/x-shellscript")
 	c.String(http.StatusOK, script)