🚧Build Hetzner Server

Build a Hetzner specific Cloud Resource Server

Before we begin

Please make sure you created your SSH key pairs prior to starting these steps.

🔐SSH Remote Access

VPS Build Procedure

Creating your account on Hetzner is a simple process similar to all other SaaS model services. At the current time, we will leave this process up to you.

1

Sign Up for an Account

https://www.hetzner.com/

2

Create a Project

Create the project and enter into the Project's dashboard.

3

Create Resource

Click on the Create Resources button.

Choose Servers

4

Location

Choose either the Nuremberg or Helsinki location.

These locations provide more server resource types.

5

Image

Choose Ubuntu and make sure that 24.04 is selected from the dropdown box.

6

Type

Select x86 (Intel/AMD)

Once selected a table of resource types will populate. You may choose a resource name from the list that best meets the specs requirements for your type of validator node.

Hypergraph Hybrid Nodes

• CPX51 is recommended

• CX52 is also recommended is aviable

• CPX41 may suffice however, you will run into disk space issues so be cautious.

Dor Data Layer 1 Nodes

• CX22

• CPX11

7

Networking

You may leave this section with the defaults

8

SSH Keys

Add SSH key

Copy and Paste your PUBLIC key to the provided box.

Follow this document Upload SSH Public Key.

If the Name field does not populate, create a name for the key that will help you identify it later.

Click the Add SSH key button.

Select your SSH key if not already checked.

9

Volumes

We can skip this section

10

Firewalls

We can skip this section. We will handle this in the next few steps.

11

We can skip all the remaining sections

Leave set to their defaults

12

Create & Buy now

13

Creation complete

Our server should populate into our server dashboard.

Record the public ip address for later.

14

Firewalls

Rest your mouse over the 🏠 button on the left side panel.

Choose Firewalls.

From the Inbound rules section, you should see a TCP ➡️ 22 rule.

Please refer to Wide Open SSH Access document for details on the security implications of allowing any system that is connected to the internet to have access to your SSH port. This document contains instructions on how to determine your local IP address for entry in this section.

If you decide to leave your SSH access wide open you can skip to the next step.

Click on Any IPv4 it will turn red, click the delete to remove it.

Click on Any IPv6 it will turn red, click the delete to remove it.

Type in the IP address you retrieved that is allocated to your local system into the same box to replace the Any IPv4 and Any IPv6 entries, and hit enter.

Replace the Add description with SSH

15

Create Layer1 Rule

This rule is designed for validator Hypergraph hybrid DAG layer1 and Dor data layer1 nodes.

Click on Add rule

Leave the Any IPv4 and Any IPv6 entries.

Leave the TCP protocol type

Replace in 9010 for the Port

Replace in 9011 in the Port range

Replace Add description with Layer1

16

Hypergraph Validator Node Only

Dor data layer1 nodes do not use these port settings. Open these ports will offer attackers an open port to your VPS without a service listening on the inside. This is not recommended.

Repeat the previous step to add a rule for Layer0.

Ports 9000 and 9001.

Click on the Create Resource button.

Choose Servers.

17

Outbound rules

Skip this section

18

Apply to

Click on Select Resources ➡️ Server.

Choose our server name from the list.

19

Labels

Skip this section

20

Name our firewall policy

21

Create our firewall

Complete

You have successfully launched a Server instance on Hetzner, Congratulations!

You are now ready to continue to connect to your node for the first time, install nodectl and turn your VPS into a Constellation Network Validator Node!