diff --git a/roborock/config.toml.template b/roborock/config.toml.template
new file mode 100644
index 0000000..6182178
--- /dev/null
+++ b/roborock/config.toml.template
@@ -0,0 +1,15 @@
+[network]
+stack_fqdn = "$ROBOROCK_FQDN"
+bind_host = "0.0.0.0"
+https_port = 8080
+mqtt_tls_port = 8883
+# Proxy terminiert TLS extern, Server läuft intern unverschlüsselt
+listener_mode = "external_tls"
+
+[tls]
+# Kein Zertifikatsmaterial im Container nötig
+mode = "provided"
+
+[auth]
+region = "$ROBOROCK_REGION"
+admin_password = "$ROBOROCK_ADMIN_PASSWORD"