diff --git a/ct/keycloak.sh b/ct/keycloak.sh
new file mode 100644
index 00000000..349fadb7
--- /dev/null
+++ b/ct/keycloak.sh
@@ -0,0 +1,72 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 tteck
+# Author: tteck (tteckster) | Co-Author: remz1337
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://www.keycloak.org/
+
+APP="Keycloak"
+var_tags="${var_tags:-access-management}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+var_postfix_sat="${var_postfix_sat:-yes}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+    header_info
+    check_container_storage
+    check_container_resources
+    if [[ ! -f /etc/systemd/system/keycloak.service ]]; then
+        msg_error "No ${APP} Installation Found!"
+        exit
+    fi
+    
+	msg_info "Stopping ${APP}"
+    systemctl stop keycloak
+	msg_ok "Stopped ${APP}"
+
+    msg_info "Updating packages"
+    apt-get update &>/dev/null
+    apt-get -y upgrade &>/dev/null
+	msg_ok "Updated packages"
+
+    RELEASE=$(curl -fsSL https://api.github.com/repos/keycloak/keycloak/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+    msg_info "Updating ${APP} to v$RELEASE"
+    cd /opt
+    wget -q https://github.com/keycloak/keycloak/releases/download/$RELEASE/keycloak-$RELEASE.tar.gz
+    mv keycloak keycloak.old
+    tar -xzf keycloak-$RELEASE.tar.gz
+    tar -czf keycloak_conf_backup.tar.gz keycloak.old/conf
+    mv keycloak_conf_backup.tar.gz keycloak-$RELEASE/conf
+    cp -r keycloak.old/providers keycloak-$RELEASE
+    cp -r keycloak.old/themes keycloak-$RELEASE
+    mv keycloak-$RELEASE keycloak
+    rm keycloak-$RELEASE.tar.gz
+    rm -rf keycloak.old
+	msg_ok "Updated ${APP} LXC"
+
+    msg_info "Restating Keycloak"
+    systemctl restart keycloak
+    msg_ok "Restated Keycloak"
+    exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080/admin${CL}"
+echo -e "${TAB}${GN}Temporary admin user:${BL}tmpadm${CL}"
+echo -e "${TAB}${GN}Temporary admin password:${BL}admin123${CL}"
+echo -e "${INFO}${YW} If you modified configurations files in `conf/`: Re-apply your changes to those files, otherwise leave them unchanged.${CL}"
diff --git a/install/keycloak-install.sh b/install/keycloak-install.sh
new file mode 100644
index 00000000..a0bf44bb
--- /dev/null
+++ b/install/keycloak-install.sh
@@ -0,0 +1,90 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: tteck (tteckster) | Co-Authors: Slaviša Arežina (tremor021), remz1337
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/keycloak/keycloak
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies (Patience)"
+$STD apt-get install -y curl
+$STD apt-get install -y sudo
+$STD apt-get install -y mc
+$STD apt-get install -y ca-certificates-java
+msg_ok "Installed Dependencies"
+
+msg_info "Installing OpenJDK"
+$STD apt install wget lsb-release -y
+$STD wget https://packages.microsoft.com/config/debian/$(lsb_release -rs)/packages-microsoft-prod.deb -O packages-microsoft-prod.deb
+$STD dpkg -i packages-microsoft-prod.deb
+$STD apt update
+$STD apt install -y msopenjdk-21
+sudo update-java-alternatives --set msopenjdk-21-amd64
+rm packages-microsoft-prod.deb
+msg_ok "Installed OpenJDK"
+
+msg_info "Installing PostgreSQL"
+$STD apt-get install -y postgresql
+DB_NAME="keycloak"
+DB_USER="keycloak"
+DB_PASS="$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
+$STD sudo -u postgres psql -c "CREATE USER $DB_USER WITH PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8';"
+$STD sudo -u postgres psql -c "GRANT ALL PRIVILEGES ON DATABASE $DB_NAME TO $DB_USER;"
+msg_ok "Installed PostgreSQL"
+
+msg_info "Installing Keycloak"
+temp_file=$(mktemp)
+RELEASE=$(curl -fsSL https://api.github.com/repos/keycloak/keycloak/releases/latest | grep "tag_name" | awk '{print substr($2, 2, length($2)-3) }')
+curl -fsSL "https://github.com/keycloak/keycloak/releases/download/$RELEASE/keycloak-$RELEASE.tar.gz" -o "$temp_file"
+tar xzf $temp_file
+mv keycloak-$RELEASE /opt/keycloak
+msg_ok "Installed Keycloak"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/keycloak.service
+[Unit]
+Description=Keycloak Service
+Requires=network.target
+After=syslog.target network-online.target
+
+[Service]
+Type=idle
+User=root
+WorkingDirectory=/opt/keycloak
+ExecStart=/opt/keycloak/bin/kc.sh start
+ExecStop=/opt/keycloak/bin/kc.sh stop
+Restart=always
+RestartSec=3
+Environment="JAVA_HOME=/usr/lib/jvm/java-21-openjdk-amd64"
+Environment="KC_DB=postgres"
+Environment="KC_DB_USERNAME=$DB_USER"
+Environment="KC_DB_PASSWORD=$DB_PASS"
+Environment="KC_HTTP_ENABLED=true"
+Environment="KC_BOOTSTRAP_ADMIN_USERNAME=tmpadm"
+Environment="KC_BOOTSTRAP_ADMIN_PASSWORD=admin123"
+# Comment following line and uncomment the next 2 if working behind a reverse proxy
+Environment="KC_HOSTNAME_STRICT=false"
+#Environment="KC_HOSTNAME=keycloak.example.com"
+#Environment="KC_PROXY_HEADERS=xforwarded"
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now keycloak
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+rm -f $temp_file
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"