diff --git a/roles/authelia/templates/configuration.yml.j2 b/roles/authelia/templates/configuration.yml.j2
index 0bff2a2..7aee676 100644
--- a/roles/authelia/templates/configuration.yml.j2
+++ b/roles/authelia/templates/configuration.yml.j2
@@ -26,11 +26,19 @@ authentication_backend:
     password: {{ vault_openldap_admin_password }}
 access_control:
   default_policy: deny
+  networks:
+    - name: local
+      networks:
+        - 192.168.0.0/24
   rules:
     - domain: "*.{{ base_domain }}"
+      networks:
+        - local
       policy: bypass
     - domain: portainer.{{ base_domain }}
       policy: one_factor
+    - domain: keycloak.{{ base_domain }}
+      policy: one_factor
 session:
   name: authelia_session
   secret: somerandomsecret