diff --git a/.gitignore b/.gitignore
index b876b1dd7..7057db9c9 100644
--- a/.gitignore
+++ b/.gitignore
@@ -179,3 +179,6 @@ $RECYCLE.BIN/
 
 !gh-actions/**/dist
 !gh-actions/github/mutex/lib
+
+# Bazel
+MODULE.bazel.lock
diff --git a/bazel/.bazelrc b/bazel/.bazelrc
new file mode 100644
index 000000000..27b618914
--- /dev/null
+++ b/bazel/.bazelrc
@@ -0,0 +1 @@
+common --enable_bzlmod=0
diff --git a/bazel/MODULE.bazel b/bazel/MODULE.bazel
new file mode 100644
index 000000000..32eb691f5
--- /dev/null
+++ b/bazel/MODULE.bazel
@@ -0,0 +1,27 @@
+module(name = "envoy_toolshed", version = "")
+
+bazel_dep(name = "aspect_bazel_lib", version = "2.4.2")
+bazel_dep(name = "bazel_skylib", version = "1.5.0")
+bazel_dep(name = "rules_pkg", version = "0.7.0")
+bazel_dep(name = "rules_python", version = "0.31.0")
+# -- bazel_dep definitions -- #
+
+bazel_lib_toolchains = use_extension("@aspect_bazel_lib//lib:extensions.bzl", "toolchains")
+bazel_lib_toolchains.jq()
+use_repo(bazel_lib_toolchains, "jq_toolchains")
+
+python = use_extension("@rules_python//python/extensions:python.bzl", "python")
+python.toolchain(python_version = "3.11")
+
+pip = use_extension("@rules_python//python/extensions:pip.bzl", "pip")
+pip.parse(
+    hub_name = "pip3",
+    python_version = "3.11",
+    requirements_lock = "//:requirements.txt",
+)
+pip.parse(
+    hub_name = "website_pip3",
+    python_version = "3.11",
+    requirements_lock = "//website:requirements.txt",
+)
+use_repo(pip, "pip3", "website_pip3")
diff --git a/bazel/WORKSPACE.bzlmod b/bazel/WORKSPACE.bzlmod
new file mode 100644
index 000000000..e69de29bb