Hetzner guides.

Step-by-step guides for Debian 13 servers on Hetzner cloud. Deployment, hardening, and infrastructure.

Deployment

Deploy a compiled binary on Hetzner Debian 13 (Trixie) with systemd

Go, Rust, or Zig binaries supervised by systemd on Hetzner.

Deployment

Deploy a Docker container on Hetzner Debian 13 (Trixie) with systemd

Run Docker containers as systemd services on Hetzner.

Hardening

Harden SSH on a Hetzner Debian 13 (Trixie) VPS

Lock down SSH on Hetzner Debian 13 (Trixie): admin user, key-only auth, AllowUsers, ufw, cloud firewall, and fail2ban.

Infrastructure

Install Docker on Hetzner Debian 13 (Trixie)

Upstream-repo Docker install on Hetzner Debian 13 (Trixie) with a production daemon.json, log rotation, live-restore, and ufw-docker notes.

Hardening

Set up ufw and the Hetzner Cloud Firewall on Hetzner Debian 13 (Trixie)

Layered default-deny firewall for Hetzner Debian 13 (Trixie): ufw at the host, Hetzner Cloud Firewall at the edge, rate-limiting, and the Docker gotcha.