diff --git a/deploy-flake.sh b/deploy-flake.sh
index 045549f2..3913f10f 100755
--- a/deploy-flake.sh
+++ b/deploy-flake.sh
@@ -30,6 +30,11 @@ while [[ $# -gt 0 ]]; do
       host=$1
       target=${1//.hq.c3d2.de/}
       target=${target//.c3d2.de/}
+
+      if [[ $target == keycloak ]]; then
+        echo "Deploying keycloak like this is a bad idea because the ssh connection ends up in the gitea container!"
+        exit 1
+        fi
       ;;
   esac
   shift