diff --git a/hosts/glyph/secrets/open-terminal-env.age b/hosts/glyph/secrets/open-terminal-env.age
new file mode 100644
index 00000000..745c306e
--- /dev/null
+++ b/hosts/glyph/secrets/open-terminal-env.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 rSr+rA JKiIcU0UOS9LRURInhjXW3/zifYQc6h0ylG+nG/qs10
+sigqGhEtQKYErUUDcRuov1OalYJuzx76O0FJiUHCKOM
+-> ssh-ed25519 3EWhnQ tnANAMEcv2VRxNjTXID5LpX7LdzV/aQQNgTe6mVVnhU
+wA/jDKTlpQE8XTEOWuzJ7dQidDw9mITn9dnrNk1tnso
+--- vmJelA+19FTGMQlaTrUamU1a6lFoehrLXok10IgGdzU
+ïͤÈï‰
Ž*9`c+»7äÂ
͹+1ÉQ®s<íê>®–ß«Ùè<½WaóÇW!7ZÀy nžÃ
+­–#ÝdÆc	´©â±äŸV‰1bzDZ
#ߪañ‹è†g×kXÑLE0¤;øúyÓý"]I”#ùºåz6Ò
\ No newline at end of file
diff --git a/hosts/glyph/secrets/open-webui-env.age b/hosts/glyph/secrets/open-webui-env.age
index 6b415448..598e4137 100644
Binary files a/hosts/glyph/secrets/open-webui-env.age and b/hosts/glyph/secrets/open-webui-env.age differ
diff --git a/hosts/glyph/services/default.nix b/hosts/glyph/services/default.nix
index a77a6da9..59bc0e8b 100644
--- a/hosts/glyph/services/default.nix
+++ b/hosts/glyph/services/default.nix
@@ -11,6 +11,7 @@
     ./filebrowser.nix
     ./jellyfin.nix
     ./nfs.nix
+    ./open-terminal.nix
     ./open-webui.nix
     ./prometheus.nix
     ./samba.nix
diff --git a/hosts/glyph/services/open-terminal.nix b/hosts/glyph/services/open-terminal.nix
new file mode 100644
index 00000000..411efbaa
--- /dev/null
+++ b/hosts/glyph/services/open-terminal.nix
@@ -0,0 +1,19 @@
+{config, ...}: {
+  age.secrets.open-terminal-env = {
+    file = ./../secrets/open-terminal-env.age;
+    mode = "440";
+  };
+
+  virtualisation.podman.enable = true;
+  virtualisation.oci-containers.backend = "podman";
+  virtualisation.oci-containers.containers.open-terminal = {
+    image = "ghcr.io/open-webui/open-terminal:latest";
+    ports = ["8000:8000"];
+    volumes = ["open-terminal:/home/user"];
+    environmentFiles = [config.age.secrets.open-terminal-env.path];
+    environment = {
+      OPEN_TERMINAL_MULTI_USER = "true";
+    };
+    extraOptions = ["--pull=newer"];
+  };
+}
diff --git a/lib/secrets/glyph.nix b/lib/secrets/glyph.nix
index f45bd768..135a9eec 100644
--- a/lib/secrets/glyph.nix
+++ b/lib/secrets/glyph.nix
@@ -6,6 +6,7 @@ in {
   "hosts/glyph/secrets/pushover-user-token.age".publicKeys = keys;
   "hosts/glyph/secrets/kagi-api-key.age".publicKeys = keys;
   "hosts/glyph/secrets/context7-api-key.age".publicKeys = keys;
+  "hosts/glyph/secrets/open-terminal-env.age".publicKeys = keys;
   "hosts/glyph/secrets/open-webui-env.age".publicKeys = keys;
   "hosts/glyph/secrets/graphite-auth-token.age".publicKeys = keys;
   "hosts/glyph/secrets/attic-credentials.age".publicKeys = keys;