diff --git a/.gitignore b/.gitignore
index 5d6cbb7..875c20c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -11,6 +11,8 @@
 # Python
 # ============================================
 __pycache__/
+# Auto-generated version file (created during Docker build)
+app/version_frozen.py
 *.py[cod]
 *$py.class
 *.so
diff --git a/Dockerfile b/Dockerfile
index 9e3c7d8..8ae7b4d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,6 +16,8 @@ COPY requirements.txt .
 RUN pip install --no-cache-dir -r requirements.txt
 
 # Copy application code
+# Note: Run 'python -m app.version freeze' before build to include version info
+# The version_frozen.py file will be copied automatically if it exists
 COPY app/ ./app/
 
 # Expose Flask port
diff --git a/app/__init__.py b/app/__init__.py
index c74d306..790db3e 100644
--- a/app/__init__.py
+++ b/app/__init__.py
@@ -1,5 +1,5 @@
 """
 mc-webui - Flask application package
-"""
 
-__version__ = "0.1.0"
+Version is managed dynamically via app/version.py based on Git metadata.
+"""
diff --git a/app/main.py b/app/main.py
index 2acb56b..143193a 100644
--- a/app/main.py
+++ b/app/main.py
@@ -12,6 +12,7 @@ from flask_socketio import SocketIO, emit
 from app.config import config, runtime_config
 from app.routes.views import views_bp
 from app.routes.api import api_bp
+from app.version import VERSION_STRING
 from app.archiver.manager import schedule_daily_archiving
 from app.meshcore.cli import fetch_device_name_from_bridge
 
@@ -43,6 +44,11 @@ def create_app():
     app.config['DEBUG'] = config.FLASK_DEBUG
     app.config['SECRET_KEY'] = 'mc-webui-secret-key-change-in-production'
 
+    # Inject version into all templates
+    @app.context_processor
+    def inject_version():
+        return {'version': VERSION_STRING}
+
     # Register blueprints
     app.register_blueprint(views_bp)
     app.register_blueprint(api_bp)
diff --git a/app/routes/api.py b/app/routes/api.py
index 75ae31b..1bbaf1b 100644
--- a/app/routes/api.py
+++ b/app/routes/api.py
@@ -1910,6 +1910,27 @@ def get_read_status_api():
         }), 500
 
 
+@api_bp.route('/version', methods=['GET'])
+def get_version():
+    """
+    Get application version.
+
+    Returns:
+        JSON with version info:
+        {
+            "success": true,
+            "version": "2025.01.18+576c8ca9",
+            "docker_tag": "2025.01.18-576c8ca9"
+        }
+    """
+    from app.version import VERSION_STRING, DOCKER_TAG
+    return jsonify({
+        'success': True,
+        'version': VERSION_STRING,
+        'docker_tag': DOCKER_TAG
+    }), 200
+
+
 @api_bp.route('/read_status/mark_read', methods=['POST'])
 def mark_read_api():
     """
diff --git a/app/templates/base.html b/app/templates/base.html
index e908c12..4e6f6d3 100644
--- a/app/templates/base.html
+++ b/app/templates/base.html
@@ -58,6 +58,9 @@
             <h5 class="offcanvas-title"><i class="bi bi-menu-button-wide"></i> Menu</h5>
             <button type="button" class="btn-close" data-bs-dismiss="offcanvas"></button>
         </div>
+        <div class="px-3 pb-2 text-muted small border-bottom">
+            <i class="bi bi-tag"></i> {{ version }}
+        </div>
         <div class="offcanvas-body">
             <div class="list-group list-group-flush">
                 <button class="list-group-item list-group-item-action d-flex align-items-center gap-3" id="refreshBtn">
diff --git a/app/version.py b/app/version.py
new file mode 100644
index 0000000..19288f3
--- /dev/null
+++ b/app/version.py
@@ -0,0 +1,70 @@
+"""
+Git-based version management for mc-webui.
+Format: YYYY.MM.DD+<short_hash> (e.g., 2025.01.18+576c8ca9)
+"""
+import subprocess
+import shlex
+import os
+
+VERSION_STRING = "0.0.0+unknown"
+DOCKER_TAG = "0.0.0-unknown"
+
+
+def subprocess_run(args):
+    """Execute subprocess and return stripped stdout."""
+    if not isinstance(args, (list, tuple)):
+        args = shlex.split(args)
+    proc = subprocess.run(
+        args,
+        capture_output=True,
+        text=True,
+        check=True,
+        env={"PATH": os.environ.get("PATH", ""), "LC_ALL": "C"}
+    )
+    return proc.stdout.strip()
+
+
+def get_git_version():
+    """Get version from git commit date and hash."""
+    # Get date (YYYY.MM.DD) and short hash
+    git_version = subprocess_run(
+        r"git show -s --date=format:%Y.%m.%d --format=%cd+%h"
+    )
+    # Keep full ISO format (with leading zeros)
+    docker_tag = git_version.replace("+", "-")
+
+    # Check for uncommitted changes (ignore .env and technotes/)
+    try:
+        subprocess_run("git diff --quiet -- . :!*.env :!.env :!technotes/")
+    except subprocess.CalledProcessError as e:
+        if e.returncode == 1:
+            git_version += "+dirty"
+
+    return git_version, docker_tag
+
+
+# Load version: frozen file takes priority, then git, then fallback
+try:
+    from app.version_frozen import VERSION_STRING, DOCKER_TAG
+except ImportError:
+    try:
+        VERSION_STRING, DOCKER_TAG = get_git_version()
+    except Exception:
+        pass  # Keep defaults
+
+
+if __name__ == "__main__":
+    import sys
+    if len(sys.argv) >= 2 and sys.argv[1] == "freeze":
+        VERSION_STRING, DOCKER_TAG = get_git_version()
+        code = f'''"""Frozen version - auto-generated, do not edit."""
+VERSION_STRING = "{VERSION_STRING}"
+DOCKER_TAG = "{DOCKER_TAG}"
+'''
+        path = os.path.join(os.path.dirname(__file__), "version_frozen.py")
+        with open(path, "w", encoding="utf8") as f:
+            f.write(code)
+        print(f"Version frozen: {VERSION_STRING}")
+    else:
+        print(f'VERSION_STRING="{VERSION_STRING}"')
+        print(f'DOCKER_TAG="{DOCKER_TAG}"')