diff --git a/config.toml b/config.toml
new file mode 100644
index 0000000..d21b8f7
--- /dev/null
+++ b/config.toml
@@ -0,0 +1,37 @@
+# === General Settings ===
+[general]
+use_middle_proxy = true
+# ad_tag = "00000000000000000000000000000000"
+
+# === Log Level ===
+# Log level: debug | verbose | normal | silent
+# Can be overridden with --silent or --log-level CLI flags
+# RUST_LOG env var takes absolute priority over all of these
+log_level = "normal"
+
+[general.modes]
+classic = false
+secure = false
+tls = true
+
+# === Server Binding ===
+[server]
+port = 9999
+# proxy_protocol = false           # Enable if behind HAProxy/nginx with PROXY protocol
+metrics_port = 9090
+metrics_whitelist = ["127.0.0.1", "::1", "0.0.0.0/0"]
+
+# Listen on multiple interfaces/IPs - IPv4
+[[server.listeners]]
+ip = "0.0.0.0"
+
+# === Anti-Censorship & Masking ===
+[censorship]
+tls_domain = "petrovich.ru"
+mask = true
+tls_emulation = true        # Fetch real cert lengths and emulate TLS records
+tls_front_dir = "tlsfront"   # Cache directory for TLS emulation
+
+[access.users]
+# format: "username" = "32_hex_chars_secret"
+hello = "00000000000000000000000000000000"