diff --git a/server/config/keycloak/docker-compose.yml b/server/config/keycloak/docker-compose.yml
new file mode 100644
index 0000000..cfb48a8
--- /dev/null
+++ b/server/config/keycloak/docker-compose.yml
@@ -0,0 +1,36 @@
+version: '3'
+
+services:
+  keycloak:
+    image: quay.io/keycloak/keycloak:latest
+    container_name: keycloak_keycloak
+    logging:
+      driver: loki
+      options:
+        loki-url: http://localhost:3100/loki/api/v1/push
+        loki-batch-size: "50"
+        loki-retries: "1"
+        loki-timeout: "2s"
+        keep-file: "true"
+    networks:
+      keycloak:
+      web:
+        aliases:
+          - keycloak
+    restart: "no"
+    command: start-dev
+    environment:
+      - KEYCLOAK_ADMIN=jafner
+      - KEYCLOAK_ADMIN_PASSWORD=iEKfrgdTLfbdqtMkH&FMrL3#t8^qfy%eSY5G94tfnUdQB3G!%CUaoFJuhCUN
+    env_file:
+      - .env
+    labels:
+      traefik.http.routers.keycloak.rule: Host(`keycloak.jafner.net`)
+      traefik.http.routers.keycloak.tls.certresolver: lets-encrypt
+      traefik.http.routers.keycloak.middlewares: securityheaders@file
+      traefik.http.services.keycloak.loadbalancer.server.port: 9000
+
+networks:
+  keycloak:
+  web:
+    external: true