Ship the side project.
Not the firewall.
A hardened, AI-ready Hetzner box in ~5 minutes — Tailscale, Cloudflare tunnel, Claude Code, real backups, zero public ports. The @levelsio "vibe coding on a server" stack — packaged and debugged on real hardware. ~$7/month, all in.
See a live Vibebox running →Even the install is vibe-coded.
Don't want to type the commands? Don't. Generate three auth tokens (Hetzner, Cloudflare, Tailscale — about 5 minutes in browser tabs), paste a prompt into Claude Code (or whatever agent you already use), and it drives the entire kit — Packer, Terraform, the Cloudflare API — directly. You confirm three safety gates along the way. Total wall time: ~10 minutes.
Two ways to spend Saturday.
You wanted to ship a side project. Here's where the next 6 hours go.
Without vibebox
- Google "harden Ubuntu SSH 2026"
- Fight ufw, accidentally lock yourself out, rebuild the box
- Cloudflare's "install command" hangs — it was for a different machine
- Litestream's release URL 404s. Why is the arch
x86_64and notamd64? needrestarthangsapt-getforever. No error.- It's 11pm. Zero product code written.
Saturday: gone.
With vibebox
- Paste two auth keys into
config.env - Run
bash vibebox.sh - Deadman timer makes lockout physically impossible
- Claude Code waiting on the box, ~5 minutes later
- Open your editor
- Actually build the thing
Saturday: still yours.
What's in the box.
One private GitHub repo. Lifetime access. MIT-licensed scripts.
~400-line idempotent bash. Deadman timer makes it physically impossible to lock yourself out.
Bakes a Hetzner image. New boxes boot in ~40 seconds, not 5 minutes.
One terraform apply per box. Repeatable, disposable infrastructure.
8 battle-tested prompts: security audit, scaffold, SQLite migration with backup-first safety, more.
The "dumb stack" agents make fewest mistakes on. Ships with a pre-tuned CLAUDE.md.
Full walkthrough. Mobile coding via Termius+Mosh+tmux. Honest "when NOT to do this."
3-2-1 SQLite streaming to R2. Survives a wiped box. Configurable in 2 minutes.
Teaser thread + landing copy if you want to remix the kit for your own audience.
What it costs to actually run.
We mark up none of it. Bring your own accounts.
| Service | Role | Cost |
|---|---|---|
| Hetzner CX23 | The VPS | ~$5/mo |
| Cloudflare | Tunnel + DNS + Universal SSL | free |
| Tailscale | Private SSH mesh | free |
| Anthropic | Claude Code | existing plan |
| Cloudflare Registrar | Domain (optional) | ~$1/mo |
| All in | ~$7/month | |
Pricing.
One-time. Lifetime updates. FOUNDERS40 for 40% off — first 50 buyers only.
Standard
FOUNDERS40- Everything in the kit
- Lifetime private-repo access
- All updates pushed (
git pull) - MIT-licensed scripts
Pro
FOUNDERS40- Everything in Standard
- Buyer Discord access
- Priority bug-fix response (48h)
- 30 min async 1:1 setup help
- Proactive breaking-change pings
14-day refund if you can't make it work. I'll try to help you debug first.
Who's this for?
You'll love it if
- You want to ship side projects, not become a sysadmin
- You're building with Claude Code and want it on a real box
- You like @levelsio's "one disposable VPS per idea" workflow
- You'd pay $29 to save a Saturday
Skip it if
- You already have your own hardened Ansible/Terraform setup
- You need Kubernetes, multi-region, or HA
- You don't use Cloudflare (the tunnel is load-bearing)
- You enjoy debugging
needrestartat midnight
FAQ.
Is this affiliated with @levelsio?
No. Inspired by his publicly shared workflow. Not endorsed by him.
Do I need a domain?
Only if you want public HTTPS. Vibebox also works as a private agent-dev box accessed only over Tailscale (no domain needed). If you do want public, the guide walks you through Cloudflare Registrar for ~$10–15/yr — the only happy path.
Is IS_SANDBOX=1 a real sandbox?
No, and the kit is explicit about this. The real safety boundary is the disposable per-project VPS plus 3-2-1 backups. The kit makes that safe and effortless — it doesn't lie about the flag.
Will this work on DigitalOcean / Linode / OVH?
The vibebox.sh path works on any fresh Ubuntu 24.04 / 26.04 box with root SSH. Packer + Terraform target Hetzner specifically. Adapting to other providers is straightforward but not pre-built.
Refunds?
14-day, no-questions. I'll try to help you debug first.
Stop yak-shaving. Start shipping.
Hardened, agent-ready VPS in ~5 minutes. FOUNDERS40 = 40% off — first 50 buyers.