# Deploy OpenBao with Easypanel

URL: /templates/openbao

OpenBao is an open-source, community-driven secrets manager and fork of HashiCorp Vault, stewarded by the Linux Foundation's OpenSSF. It manages, stores, and distributes sensitive data — secrets, certificates, and encryption keys — with fine-grained access control, dynamic secret generation, data encryption as a service, and a full audit log. This template deploys OpenBao in server mode with file-based storage and the built-in web UI enabled.

## Installation notes

After deployment, open your service URL to reach the OpenBao web UI initialisation wizard.

## Benefits

### Open-Source Vault Alternative

A true community fork of HashiCorp Vault under an OSI-approved licence, governed by the Linux Foundation — no BSL restrictions.

### Centralized Secret Management

Store API keys, database passwords, certificates, and any sensitive string in one encrypted, audited location accessible by your applications.

### Dynamic Secrets

Generate short-lived, on-demand credentials for AWS, databases, and other backends so static credentials never need to leave the vault.

## Features

### Key/Value Secret Store

Store and retrieve arbitrary secrets with versioning, metadata, and policy-based access control via the KV secrets engine.

### Data Encryption as a Service

Encrypt and decrypt data without storing it, letting applications offload cryptographic operations to OpenBao.

### PKI and Certificate Management

Act as an internal certificate authority to issue, renew, and revoke TLS certificates with configurable TTLs.

### Auth Methods

Authenticate via tokens, AppRole, Kubernetes service accounts, LDAP, GitHub, JWT, and more — integrating with your existing identity stack.

### Audit Logging

Every request and response is recorded to a tamper-evident audit log for compliance and forensic investigation.

### Web UI

A built-in browser interface lets you browse secrets, manage policies, monitor leases, and unseal the vault without the CLI.

## Configuration

- `appServiceName` (App Service Name, required): openbao

- `appServiceImage` (App Service Image, required): quay.io/openbao/openbao:2.5.5

## Services

- openbao: app (quay.io/openbao/openbao:2.5.5)

## Resources

- [Website](https://openbao.org)

- [Documentation](https://openbao.org/docs/)

- [GitHub](https://github.com/openbao/openbao)

- [Template source](https://github.com/easypanel-io/templates/tree/main/templates/openbao)