fritzjo / hetzner-docker-hosting

🖥️ Deployment and management scripts for multiple containers on a Hetzner VPS (or any other VM)

Hi there 🙌

About Me

My name is Fritz and I'm from Germany! 🇩🇪

I'm a Cloud Solution Architect, but also working on my DevOps skills. I've been a long time Linux user and open source enthusiast. Check out my homepage if you want to know more or get in touch with me!

Please keep in mind: Most of the code on my profile was developed for personal use-cases and might not work in a different context.

Tech Stack

☁️ Cloud (Azure, GCP, Hetzner)

🖥️ Operating Systems (Arch Linux, Debian)

⚙️ Automation (Ansible, Terraform, Bash)

📚 Databases (Postgres, MongoDB)

⌨️ Programming Languages (Python, Golang, Java, Typescript/React)

🛠️ Various other tools and services (ELK-Stack, TIG-Stack, OPNSense, CoreDNS, ...)

hetzner-docker-hosting's Issues

Firewall rules should be part of the security playbook

UFW rules should be defined via ansible instead in a seperate script

Provision default user via cloud-init file to avoid root usage

Make ufw rules customizable

UFW rules are currently static, but should be customizable (without using a custom ansible playbook)

Improve Portainer documentation

There should be a short description how to use Portainer to deploy new docker-compose files now that filebrowser got removed

Store secrets in custom directory

• Secrets are currently stored in the /secrets directory.
• Because they belong to the individual configuration and not the general hosting environment, they should be located in the /custom directory.

Use Ansible-Vault to encrypt secrets + Document process

Portainer access is not secured via SSL

Portainer is currently accessed by using the server ip and port 9000 directly. This prevents the usage of SSL certificates.
The management interface should have its own subdomain and certificate.

Use Ansible roles instead of plain playbooks

Enable modular deployments

It should be possible to decide which parts of the environment get deployed.

• Docker
• Backups
• Updates
• Management tools
• (future) Monitoring/Logging