Frank
02883d3ed2
Copy of the legacy ~/.pi/agent/docs tree rebuilt as the command-center knowledge base: concept files promoted to path identity, index listings stripped of frontmatter, all wikilinks/relative links resolved, every checkable claim verified against the live fleet (Dankserver = Ryzen 7 7700X + RTX 3090; Strix Halo is Dankclaw), unverifiable claims tagged. kb-lint exits 0.
2.7 KiB
type, title, description, tags, timestamp, verified
| type | title | description | tags | timestamp | verified | ||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| reference | Cloud Providers - AWS, DigitalOcean, Hetzner | Current best practices for AWS, DigitalOcean, and Hetzner - bootstrapping, IaC, cost, and lifecycle. |
|
2026-08-11 | 2026-08-28 |
Cloud Providers
This page compares current (2025/2026) practices for AWS, DigitalOcean, and Hetzner.
AWS
Use infrastructure as code with Terraform or OpenTofu. Build a landing zone with AWS Control Tower or a aws-landing-zone module.
Use these services as the baseline:
- EC2 for compute.
- RDS for managed databases.
- EKS for managed Kubernetes.
- VPC for networking.
- S3 for object storage.
- IAM for access control.
Optimize cost with Savings Plans, Spot instances for stateless work, and Reserved instances for databases.
Set a security baseline with organization SCPs, GuardDuty, Security Hub, and KMS for encryption.
DigitalOcean
Use Droplets for simple virtual servers. Use the App Platform as a PaaS for containerized applications. Use managed databases for PostgreSQL, MySQL, and Redis.
Use doctl as the command-line tool. Use the Terraform provider for infrastructure as code.
Droplets start around $4 per month. DigitalOcean costs more per compute unit than Hetzner but gives a better developer experience.
Hetzner
Hetzner Cloud offers a strong cost advantage. Compute costs are roughly half or less than DigitalOcean and AWS.
Use the hcloud CLI or the official hashicorp/hcloud Terraform provider. Manage servers, networks, firewalls, load balancers, and volumes.
Hetzner has fewer regions. It has no managed Kubernetes service and no managed databases. Run k3s, k0s, or Talos for Kubernetes.
Hetzner suits cost-sensitive homelabs, European workloads, and k3s or k0s clusters.
Provider Decision
| Factor | AWS | DigitalOcean | Hetzner |
|---|---|---|---|
| Cost | High | Medium | Low |
| Services | Enterprise | Managed databases | Limited |
| Regions | Many | Several | Few |
| Best for | Enterprise | Developer experience | Cost-sensitive clusters |
Related Tools
- cloud-init for first-boot configuration.
- Ansible for configuration management.
- WireGuard or Tailscale for private networking.
- Cloudflare Tunnels to expose services without open ports.