diff --git a/config.json b/config.json
new file mode 100644
index 0000000..134b218
--- /dev/null
+++ b/config.json
@@ -0,0 +1,73 @@
+{
+  "listen": ":$port",
+  "tls": {
+    "cert": "/path/to/ca.crt",
+    "key": "/path/to/ca.key",
+    "insecure": true,
+    "pinSHA256": "$sha256"
+  },
+  "obfs": {
+    "type": "salamander",
+    "salamander": {
+      "password": "$obfspassword"
+    }
+  },
+  "auth": {
+    "type": "password",
+    "password": "$authpassword"
+  },
+  "quic": {
+    "initStreamReceiveWindow": 8388608,
+    "maxStreamReceiveWindow": 8388608,
+    "initConnReceiveWindow": 20971520,
+    "maxConnReceiveWindow": 20971520,
+    "maxIdleTimeout": "60s",
+    "maxIncomingStreams": 60,
+    "disablePathMTUDiscovery": false
+  },
+  "bandwidth": {
+    "up": "1 gbps",
+    "down": "1 gbps"
+  },
+  "ignoreClientBandwidth": false,
+  "disableUDP": false,
+  "udpIdleTimeout": "60s",
+  "resolver": {
+    "type": "tls",
+    "tcp": {
+      "addr": "8.8.8.8:53",
+      "timeout": "4s"
+    },
+    "udp": {
+      "addr": "8.8.4.4:53",
+      "timeout": "4s"
+    },
+    "tls": {
+      "addr": "1.1.1.1:853",
+      "timeout": "10s",
+      "sni": "cloudflare-dns.com",
+      "insecure": false
+    },
+    "https": {
+      "addr": "1.1.1.1:443",
+      "timeout": "10s",
+      "sni": "cloudflare-dns.com",
+      "insecure": false
+    }
+  },
+  "acl": {
+    "inline": [
+      "reject(geosite:ir)",
+      "reject(geoip:ir)",
+      "reject(geosite:category-ads-all)",
+      "reject(geoip:private)",
+      "reject(suffix:adservice.google.com)"
+    ],
+    "geoip": "/etc/hysteria/geoip.dat",
+    "geosite": "/etc/hysteria/geosite.dat"
+  },
+  "trafficStats": {
+    "listen": "127.0.0.1:25413",
+    "secret": "$UUID"
+  }
+}