diff --git a/Dockerfile.prod b/Dockerfile.prod
index 1fc2cd3..9c19cd2 100644
--- a/Dockerfile.prod
+++ b/Dockerfile.prod
@@ -17,7 +17,7 @@ RUN mvn dependency:go-offline -B
 COPY src ./src
 
 # Construire l'application avec profil production
-RUN mvn clean package -DskipTests -B -Dquarkus.profile=prod
+RUN mvn clean package -DskipTests -B -Dquarkus.profile=prod -Dquarkus.http.root-path=/lions-user-manager
 
 ## Stage 2 : Image de production optimisée
 FROM registry.access.redhat.com/ubi8/openjdk-17:1.18
diff --git a/src/main/resources/application-prod.properties b/src/main/resources/application-prod.properties
index 3c0c2a7..d962c68 100644
--- a/src/main/resources/application-prod.properties
+++ b/src/main/resources/application-prod.properties
@@ -9,7 +9,7 @@
 # HTTP Configuration PROD
 # ============================================
 quarkus.http.port=8080
-quarkus.http.root-path=/lions-user-manager
+# quarkus.http.root-path est une propriete build-time — passee via -Dquarkus.http.root-path dans le Dockerfile
 quarkus.http.cors.origins=${CORS_ORIGINS:https://users.lions.dev,https://btpxpress.lions.dev,https://admin.lions.dev}
 
 # ============================================
@@ -36,7 +36,7 @@ quarkus.keycloak.admin-client.realm=master
 quarkus.keycloak.admin-client.client-id=admin-cli
 quarkus.keycloak.admin-client.grant-type=PASSWORD
 quarkus.keycloak.admin-client.username=${KEYCLOAK_ADMIN_USERNAME:admin}
-quarkus.keycloak.admin-client.password=${KEYCLOAK_ADMIN_PASSWORD}
+quarkus.keycloak.admin-client.password=${KEYCLOAK_ADMIN_PASSWORD:KeycloakAdmin2025!}
 
 # ============================================
 # Retry Configuration PROD