Bring or provision
Attach an SSH-accessible Linux server or create Hetzner capacity through the same machine contract.
BYO SSH / TERRAFORM / HETZNERSpawner is part of Spawnd.
Give Spawner a repository and machines—ones you already have or ones it provisions. It builds the private network, Kubernetes runtime, delivery path, public traffic, and operations around the application.
spawner01 / THE JOB
Spawner replaces the hand-built layer between your app and your infrastructure. The result feels like a platform service, but the machines, network, cluster, releases, and recovery path remain yours.
repository ──┐
├── spawner ── your application platform
machines ────┘ ├── private network
├── kubernetes + releases
├── domains + load balancing
└── operations + recovery
02 / THE SEQUENCE
Attach an SSH-accessible Linux server or create Hetzner capacity through the same machine contract.
BYO SSH / TERRAFORM / HETZNERHeadscale connects control planes and workers. Spawner installs k3s and enrolls dog for Day-2 control.
HEADSCALE / K3S / DOGCompose and Dockerfiles become reviewed applications; BuildKit produces immutable images and Helm places them.
COMPOSE / BUILDKIT / GHCR / HELMCloudflare tunnels, DNS, regional pools, health probes, and load balancers route the selected services.
TUNNEL / DNS / REGIONS / LOAD BALANCE03 / WHAT IT RUNS
$ spawner instance create --env dev --app arena --ttl 3600
This domain is the public identity of the open-source Spawner CLI. OAuth uses PKCE; provider credentials remain in the operating system credential store.