diff --git a/modules/services/openbao/default.nix b/modules/services/openbao/default.nix
new file mode 100644
index 0000000..84631ca
--- /dev/null
+++ b/modules/services/openbao/default.nix
@@ -0,0 +1,19 @@
+{ config, pkgs, ... }:
+{
+  services.openbao = {
+    enable = true;
+    settings = {
+      ui = true;
+
+      listener.default = {
+        type = "tcp";
+        tls_disable = true;
+      };
+
+      cluster_addr = "http://127.0.0.1:8201";
+      api_addr = "http://127.0.0.1:8200";
+
+      storage.raft.path = "/var/lib/openbao";
+    };
+  };
+}