Show HN: We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible

Earlier this year I led our migration off AWS to European cloud (Hetzner + OVHcloud), driven by cost (we cut 90%) and data sovereignty (GDPR + CLOUD Act concerns).

We rebuilt key AWS features ourselves using Terraform for VPS provisioning, and Ansible for everything from hardening (auditd, ufw, SSH policies) to rolling deployments (with Cloudflare integration). Our Prometheus + Alertmanager + Blackbox setup monitors infra, apps, and SSL expiry, with ISO 27001-aligned alerts. Loki + Grafana Agent handle logs to S3-compatible object storage.

The stack includes: • Ansible roles for PostgreSQL (with automated s3cmd backups + Prometheus metrics) • Hardening tasks (auditd rules, ufw, SSH lockdown, chrony for clock sync) • Rolling web app deploys with rollback + Cloudflare draining • Full monitoring with Prometheus, Alertmanager, Grafana Agent, Loki, and exporters • TLS automation via Certbot in Docker + Ansible

I wrote up the architecture, challenges, and lessons learned: https://medium.com/@accounts_73078/goodbye-aws-how-we-kept-i...

I’m happy to share insights, diagrams, or snippets if people are interested — or answer questions on pitfalls, compliance, or cost modeling.

Comments URL: https://news.ycombinator.com/item?id=44335920

Points: 16

# Comments: 2

Show HN: We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible

You might also wanna read

Meta launches paid subscriptions for Instagram, Facebook, and WhatsApp globally, tests AI and creator plans

Meta legal action forces Facebook whistleblower to sit in silence at Hay festival

Inside the movement of AI successionists who want artificial intelligence to replace humanity

Solar desalination system eliminates toxic brine while producing fresh water

AI and religion intersect: Papal encyclical and university study critique unguided AI disruption

Nvidia announces RTX Spark AI chip for Windows PCs, expanding into consumer market