diff --git a/hubzilla/addon/vs01/vs01_config.json.template b/hubzilla/addon/vs01/vs01_config.json.template
new file mode 100644
index 0000000..8406a2a
--- /dev/null
+++ b/hubzilla/addon/vs01/vs01_config.json.template
@@ -0,0 +1,22 @@
+{
+  "_note": "Copy to config.json. Do not commit config.json — it contains secrets and installation-specific values.",
+  "receiver_url": "REPLACE — orchestrator receiver endpoint, e.g. https://orchestrator1.internal.diagnostics.kane-il.us/receive",
+  "node_token": "REPLACE — shared secret for node-to-orchestrator authentication",
+  "listings_file": "REPLACE — absolute path to listings.json on the host, e.g. /var/www/hubzilla/addon/vs01/listings.json",
+  "directory_default_tab": "core",
+  "associations": {
+    "REPLACE-SLUG": {
+      "_note": "Key is the URL slug — lowercase, hyphens only, matches argv(1) in the route",
+      "name": "REPLACE — association legal name",
+      "address": "REPLACE — association street address",
+      "channel_id": 0,
+      "channel_address": "REPLACE — channel@node address",
+      "groups": {
+        "public": 0,
+        "sase_participant": 0,
+        "corpus_builder": 0,
+        "civic_professional": 0
+      }
+    }
+  }
+}