diff --git a/.woodpecker/keycloak.yaml b/.woodpecker/keycloak.yaml
new file mode 100644
index 0000000..4a4eff8
--- /dev/null
+++ b/.woodpecker/keycloak.yaml
@@ -0,0 +1,26 @@
+when:
+  - event: push
+    branch: main
+    path:
+      - "keycloak/**"
+      - ".woodpecker/keycloak.yaml"
+  - event: tag
+    ref: "refs/tags/keycloak/*"
+
+steps:
+  - name: build
+    image: quay.io/buildah/stable
+    commands:
+      - buildah build --manifest dev.ccchb.de/ccchb/oci-images/keycloak --platform=linux/amd64,linux/arm64 keycloak/
+      - buildah manifest --push all dev.ccchb.de/ccchb/oci-images/keycloak oci-archive:keycloak.tar
+    privileged: true
+  - name: push
+    image: quay.io/skopeo/stable
+    commands:
+      - skopeo login dev.ccchb.de -u ccchb -p ${FORGEJO_API_TOKEN}
+      - skopeo copy oci-archive:keycloak.tar dev.ccchb.de/ccchb/oci-images/keycloak:${CI_COMMIT_TAG##keycloak/}
+      - skopeo copy oci-archive:keycloak.tar dev.ccchb.de/ccchb/oci-images/keycloak:latest
+    secrets:
+      - FORGEJO_API_TOKEN
+    when:
+      event: tag
diff --git a/.woodpecker/workflow.yaml b/.woodpecker/workflow.yaml
deleted file mode 100644
index 66dacbb..0000000
--- a/.woodpecker/workflow.yaml
+++ /dev/null
@@ -1,10 +0,0 @@
-when:
-  - event: push
-    branch: main
-
-steps:
-  - name: build
-    image: quay.io/buildah/stable
-    commands:
-      - buildah build keycloak/
-    privileged: true