YOUR PROJECT + OUR INFRASTRUCTURE
OpenBao VPS
A VPS with OpenBao pre-installed · By OpenBao
Keep secrets and API keys in a vault with an API and policies.
Secrets manager forked from Vault, installed already initialized and unsealed, with KV v2, an admin user and the API and web UI over HTTPS.
- Initialized and unsealed before the site is public
- KV v2 at secret/ and an admin user, ready to use
- Raft snapshots for backup and unsealing under your control
from R$49.90/mo
Pay with Pix, bank slip or card · You choose the location and the plan on the next screen. Nothing is charged until you confirm.
Ready in minutes
Automatic provisioning once the order is confirmed.
24/7 support
Our own team, by chat and ticket.
Pick the right plan for OpenBao
Every plan includes public IPv4 and IPv6, NVMe storage and a 1 Gbps uplink. Click one to reach the checkout with everything filled in.
How to size your project
OpenBao uses little memory: about 450 MB after the install, before any secret, which fits the 1 GB minimum plan. Load grows with the number of secrets, tokens and requests per second. It is a single node: sizing is about performance, not high availability.
- Recommended for OpenBao
How to order OpenBao
Pick a plan
vCPU, memory and disk sized for your project. You can grow it later without reinstalling.
Confirm the order
Pix, bank slip or card. Nothing is charged until you confirm, and you have a 7-day guarantee.
OpenBao ready in minutes
The server comes up with OpenBao installed and configured. Access details appear in the panel.
What to use a OpenBao VPS for
Some of the most common uses. The server is yours — run whatever you like on it.
- Centralize API keys and database passwords that today sit in .env files and repositories
- Hand credentials to applications through the API, with tokens and per-path policies
- Keep company certificates and keys in a versioned KV with an audit log
- Give each team access only to the paths it needs, with ACL policies
OpenBao VPS specifications
- Virtualisation
- KVM, virtual server with your plan’s resources
- vCPU
- 1 to 48
- Memory
- 1 GB to 192 GB
- Storage
- NVMe, 30 GB to 2 TB
- Network
- 1 Gbps, public IPv4 and IPv6 included; DDoS protection available
- Datacenters
- Belo Horizonte (Brazil) · Dallas (USA)
- System
- OpenBao, pre-installed
- Management
- Web panel, API and MCP, VNC console, snapshots, backups and firewall
- Billing
- Monthly, quarterly, semi-annual or annual (discounted); Pix, bank slip or card
- Support and guarantee
- 24/7, 7-day money-back guarantee
About OpenBao
OpenBao is an open-source secrets manager, a fork of HashiCorp Vault under the Linux Foundation: it keeps passwords, tokens and API keys behind an API and a web interface, with access policies and an audit log. Teams use it to get credentials out of .env files and repositories.
At Master da Web, OpenBao 2.7.0 arrives from the project's own .deb package, checked against its SHA-256, with integrated Raft storage and Caddy for HTTPS. The installer initializes and unseals the vault before the site opens, enables KV v2 at secret/ and creates the admin user; the password and the root token come in the e-mail.
Mind the unsealing: to survive restarts, the 5 key shares stay on the server and the service submits them at every boot, so whoever gets a copy of the disk gets the key with the data. To keep them only with you, copy them out and delete the server's copies (see /root/openbao.txt). Backups and auditing, which ships off, are yours.
Software features
- OpenBao 2.7.0 from the official .deb, checked against the release's SHA-256
- Integrated single-node Raft storage, with snapshots through the bao command
- Initialized and unsealed by the installer: 5 key shares, 3 to unseal
- KV v2 engine at secret/ and an admin user with a full-access policy
- Admin password and root token by e-mail; key shares kept on the server
- Automatic unseal at every boot, which you turn off by deleting one file
- API and UI on 127.0.0.1:8200; only Caddy (80/443) and SSH are open
- Updates with openbao-upgrade, which checks the package SHA-256
Requirements
Platform minimum
- Memory
- 1 GB
- Storage
- 30 GB
Below this the order is refused — the checkout raises the disk for you automatically.
Recommended for production
- vCPU
- 1 vCPU
- Memory
- 2 GB
- Storage
- 30 GB
What we would put it on, not a limit.
What your OpenBao gets at Master da Web
Manage infrastructure from one panel: security, recovery, connectivity and growth. Check prices and availability when configuring your server.
Snapshots
Take a snapshot of OpenBao before a risky update and roll back to it with one click, without reinstalling anything.
Automatic backups
Scheduled copies of the whole server, kept off the host. Restore the complete OpenBao whenever you need to.
Managed firewall
Rules by port and source, applied from the panel, no iptables editing. Open only what OpenBao needs.
Security Center
Continuous external scanning of your server, with findings prioritised and the fix spelled out for each one.
Private network (VPC)
Connect OpenBao to databases and other servers over an isolated network with nothing exposed to the internet. With a VPN Gateway for remote access.
DDoS protection
Volumetric attack mitigation for your OpenBao server. Check protection options and prices when ordering.
Grow without reinstalling
Add vCPU, memory and disk from the panel and pay only the difference, and OpenBao stays exactly as it is.
API and MCP for automation
Create, resize and manage servers through the public API — or straight from an AI assistant, over MCP.
Related applications
Vaultwarden
Vaultwarden
Server compatible with the Bitwarden apps, with sign-ups closed, the owner already registered and a generated master password, behind HTTPS.
from R$49.90/moView details →Wazuh
Wazuh
Open-source SIEM and XDR with server, indexer and dashboard, passwords generated at install and agents that can only enroll with a password.
from R$169.90/moView details →authentik
authentik
Identity provider with SSO over OIDC, SAML and proxy, with akadmin created at install and the setup page closed before the site opens.
from R$59.90/moView details →Kali Linux
Kali Linux
The Kali Linux distribution, Debian-based and built for penetration testing, on a server of your own for labs and authorized audits.
Recommendedfrom R$49.90/moView details →
Know what to expect from day one.
Ready infrastructure, with the freedom to configure your application your way.
With your VPS
Your chosen image installed, the plan’s resources and a panel to manage the server. Administrative access is provided after provisioning.
Configure for your business
The order e-mail carries the admin password and the root token; the key shares are in /root/openbao.txt. Sign in at /ui/ with the Username method. Copy the key shares off the server, decide whether to keep automatic unsealing, turn auditing on and set up snapshot backups.
Expand when you need to
Backups, snapshot capacity, DDoS protection, private networking and other features are available as you need them. Check prices and availability when configuring your server.
You administer the system and application, including updates and data. For help with configuration or management, talk to our team about the scope of support.