dunops.com/Docsbeta

Integrations

Hetzner

Dun manages Hetzner Cloud servers, volumes, load balancers, firewalls, networks, and floating/primary IPs.

Connect with an API tokenHosting11 products

Note

Every mutating action — a deploy, a scale, a secret rotation, a DNS change — surfaces a plan in chat first. Dun never touches your Hetzner resources until you approve it.

How to connect

Connect once from Integrations Hetzner, then toggle on the products you want Dun to manage.

1

Step 1

Open Hetzner Cloud Console → choose your project → Security → API Tokens.
2

Step 2

Generate a Read & Write API token (so DunOps can reboot/resize) and copy it.
3

Step 3

Paste the token below and click Connect.

Where to get credentials: https://console.hetzner.cloud/projects

What Dun can do

Each product below is something you can turn on. The examples are real prompts you can type in a chat thread.

Cloud servers

Discover and run the full server lifecycle — power on/off, shut down, reboot, hard reset, snapshot, rescue mode, rebuild, resize, and delete. Every change runs only after chat approval; delete and rebuild make you type the server name first.

Type in a chat thread
List my Hetzner servers
Reboot the server called app-1

In a playbook, bind hetzner.restart to run this as a step.

PermissionRequiredWhat it does
List servers + statusYesDiscover which servers Dun can act on.
Apply approved server changesYesResize / reboot run only after chat approval.

Volumes

List Hetzner block-storage volumes — size, location, attached server, and delete protection. Attach / detach / resize / delete run only after chat approval.

Type in a chat thread
Show me my Hetzner volumes
PermissionRequiredWhat it does
List volumes + statusYesDiscover block-storage volumes and what they're attached to.
Apply approved volume changesOptionalAttach / detach / resize / delete run only after chat approval.

Load balancers

List Hetzner load balancers — public IP, type, location, and attached targets/services. Target and service changes run only after chat approval.

Type in a chat thread
Add my new server to the prod load balancer
PermissionRequiredWhat it does
List load balancers + statusYesDiscover load balancers and what they route to.
Apply approved load balancer changesOptionalTarget / service changes run only after chat approval.

Firewalls

List Hetzner firewalls — rule count and what each is applied to. Rule changes run only after chat approval.

Type in a chat thread
Open port 443 on my web firewall
PermissionRequiredWhat it does
List firewalls + rulesYes
Apply approved firewall changesOptionalRule changes run only after chat approval.

Networks

List Hetzner private networks — IP range, subnets, and attached servers. Subnet/route changes run only after chat approval.

Type in a chat thread
Show me my Hetzner networks
PermissionRequiredWhat it does
List networks + subnetsYes
Apply approved network changesOptionalSubnet / route changes run only after chat approval.

Floating IPs

List Hetzner floating IPs — address, type, attached server, home location. Assign / unassign / delete run only after chat approval.

Type in a chat thread
Show me my Hetzner floating ips
PermissionRequiredWhat it does
List floating IPs + assignmentYes
Apply approved floating IP changesOptionalAssign / unassign / delete run only after chat approval.

Primary IPs

List Hetzner primary IPs — address, type, the server each is assigned to, blocked state, and delete protection. Assign / unassign / delete run only after chat approval (assigning needs the server powered off).

Type in a chat thread
Show me my Hetzner primary ips
PermissionRequiredWhat it does
List primary IPs + assignmentYes
Apply approved primary IP changesOptionalAssign / unassign / delete run only after chat approval.

Snapshots

List Hetzner snapshots — description, disk/image size, status, and source server. Delete runs only after chat approval.

Type in a chat thread
Show me my Hetzner snapshots
PermissionRequiredWhat it does
List snapshots + statusYes
Apply approved snapshot changesOptionalSnapshot deletion runs only after chat approval.

SSH keys

List Hetzner SSH keys — name and public-key fingerprint only (never private material). Add / delete run only after chat approval.

Type in a chat thread
Show me my Hetzner ssh keys
PermissionRequiredWhat it does
List SSH keys + fingerprintYes
Apply approved SSH key changesOptionalAdd / delete run only after chat approval.

Certificates

List Hetzner certificates — type, covered domains, and expiry. Delete runs only after chat approval.

Type in a chat thread
Show me my Hetzner certificates
PermissionRequiredWhat it does
List certificates + expiryYes
Apply approved certificate changesOptionalRetry a failed managed-cert issuance / delete run only after chat approval.

Placement groups

List Hetzner placement groups — type (spread) and member servers. Delete runs only after chat approval.

Type in a chat thread
Show me my Hetzner placement groups
PermissionRequiredWhat it does
List placement groups + membersYes
Apply approved placement group changesOptionalDeletion runs only after chat approval.

Next steps