Provisioning - pulumi
Last modified by Kevin Wiki on 2026/04/06 20:22
Setting up state backend in hetzner bucket
Configure Hetzner
Login and create an Object Storage Bucket at https://console.hetzner.com/project/YOUR_PROJECT_ID/buckets.
Define a unique name along with the region you want. Create the bucket with Private visibility.
Create S3 credentials for Private Bucket access under Hetzners Security page.
Configure environment
Define the following environment variables:
export AWS_ACCESS_KEY_ID="YOUR_HETZNER_ACCESS_KEY"
export AWS_SECRET_ACCESS_KEY="YOUR_HETZNER_SECRET_KEY"
EXPORT AWS_REGION="YOUR_AWS_REGION"
export PULUMI_COMFIG_PASSPHRASE="SOME_STRONG_PASSPHRASE
export AWS_SECRET_ACCESS_KEY="YOUR_HETZNER_SECRET_KEY"
EXPORT AWS_REGION="YOUR_AWS_REGION"
export PULUMI_COMFIG_PASSPHRASE="SOME_STRONG_PASSPHRASE
Now login with the following command structure:
pulumi login "s3://YOUR_BUCKET_NAME?\
endpoint=YOUR_BUCKET_REGION.your-objectstorage.com&\
disableSSL=false&\
s3ForcePathStyle=true"
endpoint=YOUR_BUCKET_REGION.your-objectstorage.com&\
disableSSL=false&\
s3ForcePathStyle=true"