diff --git a/docker/secretsserver/Dockerfile b/docker/secretsserver/Dockerfile
new file mode 100644
index 0000000..2c84094
--- /dev/null
+++ b/docker/secretsserver/Dockerfile
@@ -0,0 +1,15 @@
+FROM golang:1.27.2 AS build
+
+WORKDIR /usr/secretsserver
+COPY . .
+
+RUN go mod download
+RUN go vet -v ./...
+RUN go test -v ./...
+
+RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /usr/bin/secretsserver ./cmd/secretsserver
+
+FROM gcr.io/distroless/static-debian13
+
+COPY --from=build /usr/bin/secretsserver /
+CMD ["/secretsserver"]