diff --git a/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf b/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf
index 86a72d9..6128d23 100644
--- a/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf
+++ b/playbooks/files/chaosknoten/configs/keycloak/nginx/keycloak-admin.hamburg.ccc.de.conf
@@ -41,7 +41,9 @@ server {
     # Also provide "_hidden" for by, since it's not relevant.
     proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden";
 
-    allow 185.161.129.132/32;
+    allow 185.161.129.132/32; # z9
+    allow 213.240.180.39/32; # stbe home
+    allow 2a01:170:118b::1/64; # stbe home
     deny all;
 
     location ^~ / {