diff --git a/.gitignore b/.gitignore
index 6ee0103..7913d1c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,3 @@
 /data
 /.env
+/backup
diff --git a/backup.sh b/backup.sh
new file mode 100755
index 0000000..a1862e4
--- /dev/null
+++ b/backup.sh
@@ -0,0 +1,6 @@
+#!/bin/sh
+time=$(date +"%Y-%m-%dT%H:%M:%S%z")
+dir=backup
+[ -d "${dir}" ] || mkdir -p "${dir}"
+docker compose run --rm -u postgres keycloak_db sh -c 'PGPASSWORD=$POSTGRES_PASSWORD pg_dump -h keycloak_db -p 5432 -U $POSTGRES_USER keycloak' > "${dir}/${time}.sql"
+# to restore: pg_restore -d newdb db.dump