Initial OpenBao deployment setup

LICENSE

@@ -0,0 +1,12 @@
+Copyright (C) 2026 by Kris Lamoureux <kris@lamoureux.io>
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT
+OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

README.md

@@ -0,0 +1,32 @@
+# OpenBao Deployment
+
+OpenBao is an open-source secrets manager forked from HashiCorp Vault.
+
+## Variables
+
+### Docker Settings
+
+- `IMAGE`: Docker image (default: `ghcr.io/openbao/openbao`).
+- `VERSION`: Image tag (required, no default).
+- `NAME`: Container name (default: `openbao`).
+
+### Volumes
+
+- `DATA`: Path to the data directory on the host (required, no default).
+- `CONFIG`: Path to the configuration directory on the host (required, no
+  default).
+- `LOGS`: Path to the logs directory on the host (required, no default).
+
+### Network
+
+- `ENDPOINT`: Address and port binding (default: `127.0.0.1:8200`).
+- `PORT`: Internal listening port (default: `8200`).
+
+### Other Settings
+
+- `LOGLEVEL`: Logging level (default: `info`).
+
+## License
+
+This project is released under the 0BSD license, which allows for unrestricted
+use, modification, and distribution.

docker-compose.yml

@@ -0,0 +1,15 @@
+services:
+  openbao:
+    image: ${IMAGE:-ghcr.io/openbao/openbao}:${VERSION:?}
+    container_name: ${NAME:-openbao}
+    command: server
+    ports:
+      - ${ENDPOINT:-127.0.0.1:8200}:${PORT:-8200}
+    environment:
+      BAO_ADDR: http://0.0.0.0:${PORT:-8200}
+      BAO_API_ADDR: http://0.0.0.0:${PORT:-8200}
+      BAO_LOG_LEVEL: ${LOGLEVEL:-info}
+    volumes:
+      - ${DATA:?}:/openbao/file:Z
+      - ${CONFIG:?}:/openbao/config:ro,Z
+      - ${LOGS:?}:/openbao/logs:Z