Connecting Hetzner

Potions needs access to your Hetzner Cloud account to provision servers, manage SSH keys, and create servers on your behalf. Unlike DigitalOcean (which uses OAuth), Hetzner Cloud is connected with a project-scoped API token that you generate in the Hetzner Cloud Console and paste into Potions.

Generating an API Token

  1. Open the Hetzner Cloud Console and select the project you want Potions to manage.

  2. Go to Security → API Tokens.

  3. Click Generate API Token, give it a name (e.g. Potions), and choose Read & Write permissions.

  4. Copy the token. Hetzner only shows it once, so copy it before you leave the page.

Don't have a Hetzner account yet? Create one here. You'll need an active payment method on your account before Potions can create servers.

For more detail, see Hetzner's own guide on generating an API token.

Connecting Your Account

  1. From the Dashboard, click Connect next to Hetzner Cloud.

  2. On the Connect Hetzner Cloud page, optionally add a label to identify this project.

  3. Paste your API token into the API Token field.

  4. Click Connect Hetzner. Potions validates the token against the Hetzner API and saves it.

Your token is encrypted at rest with AES-256-GCM. If the token is rejected, make sure it has Read & Write permissions and belongs to the right project.

What Potions Gets Access To

A Hetzner API token is scoped to a single project. Potions can only create and manage resources within that project - it has no access to your other projects, your Hetzner billing, or your account settings.

Disconnecting

To disconnect your Hetzner Cloud account:

  1. Go to your Account (click your avatar in the top nav)
  2. Find your Hetzner Cloud connection under Providers
  3. Click Disconnect
  4. Confirm the disconnection

Disconnecting removes your encrypted token from Potions. Servers that were already created continue to run on Hetzner - Potions doesn't delete or modify them, and apps already deployed keep running. However, you won't be able to provision additional servers until you reconnect.

Things to Know

  • Tokens are project-scoped. Each token grants access to a single Hetzner project. To manage a different project, generate a token there and connect it.
  • Read & Write is required. A read-only token can't create or manage servers. If provisioning fails right after connecting, double-check the token's permissions.
  • Existing servers survive disconnection. Disconnecting removes Potions' ability to manage your Hetzner project, but servers already running are untouched. They're your servers and you can always manage them directly in the Hetzner Cloud Console.