Deploy Supabase to Hetzner
Production-ready, hardened, with 2FA and encrypted backups.
Everything runs in your browser — we never see your credentials.
🔐Zero Knowledge
API keys exist only in browser memory (React state). Never stored, never transmitted to us.
🛡️Hardened by Default
SSH key-only, UFW, fail2ban, kernel sysctl, auto-updates, bcrypt-12, security headers.
🔄Encrypted Backups
Daily AES-256 encrypted backups via restic to AWS S3.
⚡One Click, ~10 Min
Server creation → OS hardening → Supabase + Caddy + Authelia + Redis → S3 backup cron.
Before you start: You need a Hetzner Cloud API token with Read & Write permissions. Get one at console.hetzner.cloud → Security → API Tokens. SSH keys are generated automatically in your browser — no need to create one yourself.
FAQ
What does 'zero knowledge' mean?▾
Can I verify this is safe?▾
Can I deploy multiple instances?▾