diff --git a/net/keycloak/Bastillefile b/net/keycloak/Bastillefile
new file mode 100644
index 0000000..db46756
--- /dev/null
+++ b/net/keycloak/Bastillefile
@@ -0,0 +1,6 @@
+PKG keycloak
+
+SYSRC keycloak_enable=YES
+SYSRC keycloak_flags="start-dev --bootstrap-admin-username tmpadmin --bootstrap-admin-password tmpadmin"
+
+SERVICE keycloak start
diff --git a/net/keycloak/README.md b/net/keycloak/README.md
new file mode 100644
index 0000000..8b14a59
--- /dev/null
+++ b/net/keycloak/README.md
@@ -0,0 +1,10 @@
+## Keycloak
+Bastille template to boostrap Keycloak.
+
+## Usage
+```shell
+bastille template TARGET net/keycloak
+```
+
+Then go to `http://<JAIL-IP>:8080/` and use `tmpadmin` for both the username
+and the password.