All the articles with the tag "tailscale".
My starting point for a disposable Hetzner agent box: cloud-init hardening, Tailscale access, optional Cloudflare Tunnel, resource planning, and automation scripts.