diff --git a/external-proxy/keycloak-exposed.yml b/external-proxy/keycloak-exposed.yml
new file mode 100644
index 0000000..ae8a2d4
--- /dev/null
+++ b/external-proxy/keycloak-exposed.yml
@@ -0,0 +1,8 @@
+---
+# only expose the ports when you know what you re doing!
+services:
+  keycloak:
+    ports:
+      # expose the keycloak server on localhost
+      - "0.0.0.0:9000:9000"
+      - "0.0.0.0:8080:8080"