diff --git a/docker/openbao/Dockerfile b/docker/openbao/Dockerfile
new file mode 100644
index 0000000..e7d630b
--- /dev/null
+++ b/docker/openbao/Dockerfile
@@ -0,0 +1,19 @@
+FROM quay.io/openbao/openbao:2
+
+LABEL maintainer="Mosaic Stack <dev@mosaic.local>"
+LABEL description="OpenBao secrets management for Mosaic Stack"
+
+# Copy OpenBao configuration
+COPY config.hcl /openbao/config/config.hcl
+
+# Copy auto-initialization script
+COPY init.sh /openbao/init.sh
+RUN chmod +x /openbao/init.sh
+
+# Expose OpenBao port
+EXPOSE 8200
+
+# Use the default entrypoint from the base image
+# The container will be started with either:
+# - Default: openbao server -config=/openbao/config/config.hcl
+# - Init sidecar: /openbao/init.sh