Production-grade Kubernetes cluster on Hetzner Cloud using Talos Linux — private nodes behind HA OPNsense NAT, Cilium CNI with WireGuard encryption, Longhorn distributed storage on Hetzner attached volumes, Traefik ingress with automatic Hetzner Load Balancer, and cert-manager.
A production-grade High Availability (HA) firewall setup using OPNsense on Hetzner Cloud with floating IP failover, OpenVPN, WireGuard, HAProxy SSL termination, and private network routing — without CARP .