I've been experimenting with a Hetzner server recently, and while I'm enjoying the experience, I'm struggling to figure out how others manage their applications on a single server setup. I found myself using a multi-cloud approach with Google Cloud Platform (GCP) to access things like secrets and artifact registries for Docker images, which is quite different from just relying on Hetzner alone. I'm curious if managing an application solely on a single server without additional services is feasible, or if I'm missing some workflows or tools that could simplify this process. Any advice or insights would be greatly appreciated!
5 Answers
Pretty much every tool you think you might need has an open-source alternative out there. It's really about how much time you're willing to invest in configuring everything to fit your needs. If you're up for the challenge, there are plenty of resources available!
For many folks running a single server, they might not need all the extra services you mentioned. Typically, access is secured through SSH, and secrets can be kept in a config file right on the server. If an image registry is essential, you could use tools like Nexus, and GitLab comes with its own built-in registry too. However, hosting all those services yourself can lead to some serious maintenance headaches if you're only operating one server.
Managing your application really depends on the services you're utilizing. If you're incorporating GCP's Secret Manager or Artifact Registry off GCP, you could set up external service accounts or leverage Workload Identity Federation. For apps interacting with external services, just stick with their recommended authentication methods like OAuth or API keys.
The process is pretty straightforward: set up your required packages, and then when it’s time to update your app, just pull the latest code and make the necessary database updates. If your app is important, consider scheduling regular backups to a different provider to prevent data loss. Honestly, this basic approach has worked well for years!
You can set up all needed services on your own! Consider using Vault for secrets management, Harbor for an image registry, or Authentik for managing user accounts and authentication. It’s definitely doable, but be prepared for some configuration work on your part.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures