skills.rest
tomspiegl
tomspieglCOMMUNITY
Explore all skills by this author →
GitHub

hetzbot-add-host

Provision Hetzner Cloud hosts with tofu and join them to the Tailnet.

Updated Apr 17, 2026
Search Tags:#automation#cloud#infrastructure-as-code#hetzner#ssh#tailscale#provisioning
One-click install
npx skills add https://github.com/tomspiegl/hetzbot --skill hetzbot-add-host
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hetzbot-add-host
Source: https://github.com/tomspiegl/hetzbot/tree/main/skills/hetzner/add-host
Command: npx skills add https://github.com/tomspiegl/hetzbot --skill hetzbot-add-host

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provision Hetzner Cloud hosts automatically and integrate them into the fleet to streamline scaling operations and reduce manual provisioning time.

Core Features & Use Cases

  • Automated host provisioning via tofu plan and apply to create Hetzner VM, update configuration, and bootstrap.
  • Tailnet onboarding and SSH hardening so that access is restricted to the Tailnet after initial bootstrap.
  • Fleet integration with hosts.tfvars updates, reviewer checks, and post-boot validation to ensure compliant deployments.

Quick Start

Initialize the add-host workflow by supplying a host name and basic options; the agent will create the cloud instance, bootstrap it, join the tailnet, and enforce SSH hardening.

Frequently Asked Questions about hetzbot-add-host

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Hetzner Cloud host provisioning and join it to a Tailnet?▼

To automate Hetzner Cloud host provisioning, you supply a host name and basic options. The Skill then creates the cloud instance via tofu, bootstraps it with cloud-init, joins the Tailnet, and enforces SSH hardening.

What is the process for adding a new host to an infrastructure-as-code fleet?▼

Adding a new host involves gathering inputs, updating the hosts.tfvars configuration file, provisioning resources with tofu, booting the host, and joining the Tailnet to ensure compliant fleet integration.

Does this provisioning workflow handle SSH hardening and post-boot validation?▼

Yes, the provisioning workflow handles SSH hardening to restrict access to the Tailnet after bootstrap. It also performs post-boot reviewer validation to ensure all deployments are compliant.

Can I use tofu to provision Hetzner VMs and update fleet configuration automatically?▼

Yes, you can use tofu to provision Hetzner VMs. The workflow updates your infrastructure-as-code fleet configuration in hosts.tfvars and applies the plan to create and bootstrap the resources automatically.

What do I need to provide to start bootstrapping a Hetzner host with cloud-init?▼

You need to provide a host name and basic options to initialize the workflow. The agent then handles the cloud-init bootstrap, joins the Tailnet, and enforces SSH hardening automatically.

Why restrict SSH access to Tailscale when onboarding new Hetzner hosts?▼

Restricting SSH access to Tailscale secures the newly provisioned Hetzner host after initial bootstrap. This ensures only authenticated devices on the Tailnet can access the server.

Related Skills

Explore More Software Engineering Skills→
tomspiegltomspiegl

hetzbot-remove-host

Removes a Hetzner Cloud host VM, updates tfvars state, and reminds about Tailscale cleanup.

Community
Advanced
supportersimulatorsupportersimulator
2

fleet-repair

Coordinate L1-L4 repair escalation for degraded fleet channels via SSH.

Community
Advanced
shepherdjerredshepherdjerred
127

tailscale-helper

Assist with Tailscale CLI commands, MagicDNS, ACLs, SSH, and service exposure.

Community
Advanced
jurislmjurislm

hetzner

Manage Hetzner Cloud servers and SSH keys via MCP tools.

Official
Intermediate