diff --git a/Trojan-TCP-XTLS/nginx.conf b/Trojan-TCP-XTLS/nginx.conf
new file mode 100644
index 0000000..26e92a4
--- /dev/null
+++ b/Trojan-TCP-XTLS/nginx.conf
@@ -0,0 +1,63 @@
+user nginx;
+worker_processes auto;
+error_log /var/log/nginx/error.log;
+pid /run/nginx.pid;
+
+include /usr/share/nginx/modules/*.conf;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
+                      '$status $body_bytes_sent "$http_referer" '
+                      '"$http_user_agent" "$http_x_forwarded_for" '
+                      '$proxy_protocol_addr:$proxy_protocol_port';
+
+    access_log  /var/log/nginx/access.log  main;
+
+    sendfile            on;
+    tcp_nopush          on;
+    tcp_nodelay         on;
+    keepalive_timeout   65;
+    types_hash_max_size 2048;
+
+    include             /etc/nginx/mime.types;
+    default_type        application/octet-stream;
+
+    include /etc/nginx/conf.d/*.conf;
+
+    server {
+        #listen       80 default_server;
+        #listen       [::]:80 default_server;
+        listen       [::]:80 default ipv6only=off;
+        return       301 https://$http_host$request_uri;
+    }
+
+    server {
+        listen       unix:/dev/shm/default.sock proxy_protocol;
+        listen       unix:/dev/shm/h2c.sock http2 proxy_protocol;
+
+        # 把example.com换成你的域名
+        server_name  example.com;
+
+        root         /usr/share/nginx/html;
+
+        set_real_ip_from 127.0.0.1;
+
+
+        include /etc/nginx/default.d/*.conf;
+
+        # 开启HSTS，混sslab的A+
+	      add_header Strict-Transport-Security "max-age=63072000" always;
+
+        error_page 404 /404.html;
+            location = /40x.html {
+        }
+
+        error_page 500 502 503 504 /50x.html;
+            location = /50x.html {
+        }
+    }
+}