Firewall

Firewall Presets

Ready-to-deploy configuration presets for Firewall. Each preset is a complete manifest you can copy, customize, and deploy.

3 presets
01

Web Server Firewall

This preset creates a firewall for public-facing web servers, allowing inbound SSH, HTTP, HTTPS, and ICMP from all IPv4 and IPv6 addresses. It covers the most common Hetzner Cloud server deployment:...

02

SSH-Only Firewall

This preset creates a minimal-surface firewall that allows only SSH and ICMP inbound. All other inbound traffic is dropped by Hetzner Cloud's deny-by-default policy. This is the tightest useful...

03

Private Network Firewall

This preset creates a firewall that restricts all inbound traffic to a single private CIDR range, blocking all access from the public internet. Only SSH and ICMP are permitted, and only from hosts...