diff --git a/packages/tests/default.nix b/packages/tests/default.nix
index 2d37aa1..720c21a 100644
--- a/packages/tests/default.nix
+++ b/packages/tests/default.nix
@@ -3,4 +3,21 @@ let
   inherit (pkgs) nixosTest;
 in
 {
+  keycloak = nixosTest {
+    name = "keycloak";
+    nodes.machine.services.keycloak = {
+      enable = true;
+      package = pkgs.keycloak.override { jre = inputs.self.packages.${system}.jre17_standard; };
+      database.passwordFile = builtins.toFile "keycloak-test-password" "kcnixostest1234";
+      settings = {
+        proxy = "edge";
+        hostname = "keycloak.local";
+      };
+    };
+    testScript = ''
+      machine.wait_for_unit("keycloak.service")
+      machine.wait_for_open_port("80")
+      machine.succeed("curl --fail http://127.0.0.1:80")
+    '';
+  };
 }