diff --git a/srcpkgs/vault/files/vault.hcl b/srcpkgs/vault/files/vault.hcl
new file mode 100644
index 00000000000..fa01cd9d381
--- /dev/null
+++ b/srcpkgs/vault/files/vault.hcl
@@ -0,0 +1,8 @@
+storage "file" {
+	path = "/var/lib/vault"
+}
+
+listener "tcp" {
+	address = "127.0.0.1:8200"
+	tls_disable = 1
+}
diff --git a/srcpkgs/vault/files/vault/run b/srcpkgs/vault/files/vault/run
new file mode 100644
index 00000000000..c9fc6d03f78
--- /dev/null
+++ b/srcpkgs/vault/files/vault/run
@@ -0,0 +1,3 @@
+#!/bin/sh
+
+exec chpst -u _vault vault server -config=/etc/vault.hcl
diff --git a/srcpkgs/vault/template b/srcpkgs/vault/template
new file mode 100644
index 00000000000..a429636c1f3
--- /dev/null
+++ b/srcpkgs/vault/template
@@ -0,0 +1,21 @@
+# Template file for 'vault'
+pkgname=vault
+version=0.10.4
+revision=1
+build_style=go
+go_import_path="github.com/hashicorp/${pkgname}"
+short_desc="Tool for securely accessing secrets"
+maintainer="iaroki <iaroki@protonmail.com>"
+license="MPL-2.0"
+homepage="https://www.vaultproject.io/"
+distfiles="https://github.com/hashicorp/${pkgname}/archive/v${version}.tar.gz"
+checksum=5f3e4dd0cd1f4cb1e4fc4be38a4839d8683bad62ad5b7a68f1e49f545750b42b
+system_accounts="_vault"
+conf_files="/etc/vault.hcl"
+make_dirs="/var/lib/vault 0700 _vault _vault"
+
+post_install() {
+	vinstall ${FILESDIR}/vault.hcl 644 etc/
+	vlicense LICENSE
+	vsv vault
+}