login.example.com to my instance at auth.example.com, I set x-zitadel-public-host: login.example.com and x-zitadel-instance-host: auth.example.com headers before sending forwarding the request to my instance. The instance is ignoring these headers and any URLs in the responses contain the instance domain, not the ui/proxy/public host domain..well-known/openid-configuration returns a response with URLs of auth.example.com instead of login.example.com. This can easily be rewritten by nginx, however, the token response returns a token with a jwt that has the claim iss: https://auth.example.com instead of iss: https://login.example.com.