
Hetzner Server
Streamlines Hetzner Cloud server provisioning with the hcloud CLI. Includes pre-configured firewall profiles (Tailscale-only, Tailscale plus SSH, Tailscale plus web), cloud-init examples for dotfiles and swap setup, and an SSH config generator that creates both standard and agent-forwarding entries for each server. The ARM server recommendations are solid, the IPv6-only cost saving tip is practical, and the post-creation host key cleanup prevents the usual SSH fingerprint headaches when Hetzner recycles IPs. Assumes you're running a specific dotfiles setup and SSH key naming scheme, but the examples are clear enough to adapt if your workflow differs.
- skills.sh installs
- 237
- GitHub stars
- 18
- last updated
- Aug 21, 2026
Install
$ npx -y skills add connorads/dotfiles --skill hetzner-server --agent claude-codeInstalls into .claude/skills of the current project.
Files
Hetzner Server Management
Create and manage Hetzner Cloud servers using the hcloud CLI.
Prerequisites
hcloudCLI installed (via mise:hcloud = "latest")- Authenticated:
hcloud context create <name>with API token from https://console.hetzner.cloud
Cloud Firewalls
Reusable firewall profiles applied at server creation. Firewalls can be swapped on running servers - use apply-to-resource / remove-from-resource.
| Firewall | Rules | Use case |
|---|---|---|
ts-ssh | UDP 41641 (Tailscale) + TCP 22 (SSH) | Dev boxes - initial setup, swap to ts-only after restricting UFW to Tailscale |
ts-only | UDP 41641 (Tailscale) | Tailscale-only access, no public ports |
ts-web | UDP 41641 (Tailscale) + TCP 80,443 (HTTP/S) | Servers accepting public web traffic |
Swapping firewalls on a running server
hcloud firewall remove-from-resource ts-ssh --type server --server dev
hcloud firewall apply-to-resource ts-only --type server --server dev
Quick Reference
Create a server
Sponsors
Details
- Repository
- github.com/connorads/dotfiles
- Categories
- Backend & APIs, Cloud & Infrastructure, CLI & Terminal
- First seen
- Jun 3, 2026