speckit-infrastructure-expert.agent

Builds secure, cost-efficient K3s infrastructure on Hetzner Cloud with Terraform.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/franciscosanchezn/easyfactu-es --skill speckit-infrastructure-expert-agent
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: speckit-infrastructure-expert.agent
Source: https://github.com/franciscosanchezn/easyfactu-es/tree/main/.github/skills/speckit-infrastructure-expert.agent
Command: npx skills add https://github.com/franciscosanchezn/easyfactu-es --skill speckit-infrastructure-expert-agent

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Provides expert guidance and practical patterns to build cost-efficient, secure infrastructure for small-to-medium projects using Terraform, K3s, Hetzner Cloud, and Traefik, focusing on reproducibility and maintainability.

Core Features & Use Cases

  • K3s deployment and security hardening for single-node clusters to deliver a dependable, production-like environment on a single node.
  • Terraform + Kustomize infrastructure as code patterns for reusable modules and environment-specific overlays, enabling scalable infra across dev, staging, and prod.
  • Cost-optimized defaults and security best practices (firewall rules, cert-manager TLS, RBAC) for reliable, affordable deployments on Hetzner.

Quick Start

Initialize a minimal single-node K3s cluster on Hetzner, using Terraform to provision resources and verify SSH access, firewall, and TLS setup.

Frequently Asked Questions about speckit-infrastructure-expert.agent

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a single-node K3s cluster on Hetzner Cloud using Terraform?▼

Secure a K3s cluster by applying Kubernetes RBAC, configuring Hetzner firewall rules, and enabling cert-manager TLS through Traefik, ensuring production-like security defaults on a single-node deployment.

How does Terraform manage Kustomize overlays for K3s environments?▼

Terraform manages Kustomize overlays by applying reusable infrastructure as code modules across dev, staging, and prod environments, enabling scalable and maintainable configuration overlays for K3s deployments.

Can I use this infrastructure approach for large-scale Kubernetes deployments?▼

This infrastructure approach targets small-to-medium projects running on single-node K3s clusters, focusing on cost-optimized defaults rather than large-scale, multi-node Kubernetes deployments.

What is the best way to optimize infrastructure costs for K3s on Hetzner?▼

Optimize K3s infrastructure costs on Hetzner by applying cost-targeted Terraform defaults, provisioning single-node resources efficiently, and maintaining strict infrastructure as code discipline to avoid unnecessary cloud spend.

Do I need cert-manager to set up TLS on a K3s Traefik ingress?▼

Cert-manager is required to automate TLS certificate provisioning for Traefik ingress on K3s, providing secure HTTPS defaults without manual certificate management overhead.