Engineering
Hetzner VPS Security: Close Port 22 with Tailscale + ufw
Lock down SSH on your Hetzner VPS with Tailscale and restrict port 443 to Cloudflare IPs only. Our exact production ufw setup — no public SSH port, no direct origin access.
Mar 24, 2026