Thanks for the pointer, https://news.ycombinator.com/item?id=47649354

edit: looks like there are affordable managed hosting providers for keycloak.