network-security
Network Security
Headscale v0.27.1 VPN and firewall for secure admin access. (Updated: January 2026). All scripts are idempotent - check state before applying changes.
Responsibility
| This Skill | Other Skills |
|---|---|
| Headscale VPN setup | Servers → hetzner-infra |
| VPN user management | DNS → hetzner-infra |
| Firewall rules | TLS → k8s-cluster-management |
| Bastion hardening | LB → hetzner-infra |
Architecture
More from nmime/infra-skills
skill-creator
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
11minio-storage
MinIO S3-compatible object storage on Kubernetes. Use when deploying MinIO, configuring buckets, setting up integrations with GitLab/Loki/backups, or managing S3-compatible storage infrastructure.
7hetzner-infra
Hetzner cloud infrastructure provisioning for Kubernetes. Use when provisioning servers, networks, load balancers, firewalls, DNS zones, or storage on Hetzner Cloud via hcloud CLI.
6k8s-secrets
Vault + External Secrets Operator for secrets management.
6k8s-autoscaling
KEDA event-driven autoscaling for Kubernetes. Use when installing KEDA, configuring scalers (Prometheus, RabbitMQ, Kafka, etc.), setting up HPA, or implementing autoscaling best practices.
6k8s-cluster-management
Kubernetes cluster installation via Kubespray. Always use Kubespray for cluster provisioning. Includes core addons (Cilium, Gateway API, cert-manager, LoadBalancer). Multi-cloud support.
6