diff --git a/salt/master/api.yml b/salt/master/api.yml
new file mode 100644
index 0000000..1cfeb42
--- /dev/null
+++ b/salt/master/api.yml
@@ -0,0 +1,30 @@
+parameters:
+  _param:
+    salt_master_api_port: 8000
+  salt:
+    api:
+      enabled: true
+      bind:
+        address: 0.0.0.0
+        port: ${_param:salt_master_api_port}
+    master:
+      command_timeout: 600
+      user:
+        salt:
+          permissions:
+          - '.*'
+          - '@local'
+          - '@wheel'   # to allow access to all wheel modules
+          - '@runner'  # to allow access to all runner modules
+          - '@jobs'    # to allow access to the jobs runner and/or wheel mo
+  linux:
+    system:
+      user:
+        salt:
+          enabled: true
+          name: salt
+          password: ${_param:salt_api_password_hash}
+          home: /var/tmp/salt
+          sudo: false
+          system: true
+          shell: /bin/false