# Syself > Syself is a Kubernetes management platform that simplifies the deployment, operation, and lifecycle management of production-ready Kubernetes clusters on Hetzner infrastructure (both cloud VMs and bare metal servers). Syself reduces Kubernetes operational costs by up to 80% through automation, self-healing, zero-downtime upgrades, and declarative GitOps-compatible configurations — no Kubernetes expertise required. For the full content version, see: https://syself.com/llms-full.txt Syself simplifies Kubernetes by eliminating the operational burden of cluster management. The platform, called Syself Autopilot, leverages Cluster API (CAPI) to provide automated provisioning, scaling, self-healing, and zero-downtime upgrades for Kubernetes clusters running on Hetzner Cloud and Hetzner dedicated (bare-metal) servers. Unlike traditional Infrastructure as Code tools such as Terraform or Ansible, Syself continuously reconciles infrastructure state, automatically fixing configuration drift and server failures without human intervention. Syself is purpose-built for teams that want enterprise-grade Kubernetes without hiring a dedicated infrastructure team. The platform supports cloud virtual machines, bare-metal servers, ARM nodes, and GPU-equipped machines within the same cluster. Features include declarative cluster configuration, GitOps-native workflows compatible with Argo CD and Flux, OIDC-based identity management, managed databases on local NVMe storage, and GDPR-compliant European hosting. Syself maintains and tests hardened OS images, handles Kubernetes version upgrades across all cluster components, and provides Cluster Stacks — versioned, tested bundles that define every aspect of a cluster from the CNI to the OS image. Syself serves customers across 28 countries, powering infrastructure for over 100 million end users daily. Customers range from startups and agencies to enterprises like LanguageTool (250 bare-metal GPU servers, 20,000 req/s) and educational platforms like eKool (70% of Estonian schools). The company is based in Eschborn, Germany, is a founding member of the Sovereign Cloud Stack Forum, and was awarded the German government's KaaS framework tender (SCS VP-05). Syself offers a 14-day free trial and pricing based on cloud provider spend rather than per-node or per-CPU fees. ## Getting Started - [Introduction to Syself Autopilot](https://syself.com/docs/hetzner/apalla/getting-started/introduction-to-syself-autopilot): Overview of Syself Autopilot architecture, management cluster interaction, Cluster API foundation, and documentation structure - [Prerequisites](https://syself.com/docs/hetzner/apalla/getting-started/prerequisites): Install kubectl and kubelogin (OIDC plugin via Krew) for Linux, macOS, and Windows - [Accessing the Management Cluster](https://syself.com/docs/hetzner/apalla/getting-started/accessing-the-management-cluster): Configure kubeconfig with OIDC authentication, set namespace to your organization, and access via kubectl - [Hetzner Account Preparation](https://syself.com/docs/hetzner/apalla/getting-started/hetzner-account-preparation): Create Hetzner Cloud project, generate API token, upload SSH keys, configure Robot user for bare metal, create Kubernetes secrets - [Creating Clusters](https://syself.com/docs/hetzner/apalla/getting-started/creating-clusters): Apply ClusterStack and HetznerClusterStackReleaseTemplate, create Cluster resource, retrieve workload kubeconfig ## Documentation ### Platform - [Adding Users](https://syself.com/docs/hetzner/apalla/platform/adding-users): Add and manage users in your organization via Zitadel identity management at id.syself.com - [Authorization and Roles](https://syself.com/docs/hetzner/apalla/platform/authorization-and-assign-roles): Assign org-name (read-only) or org-name-admin roles for RBAC-based management cluster access - [SaaS and Dedicated Autopilot](https://syself.com/docs/hetzner/apalla/platform/saas-and-dedicated-autopilot): SaaS mode (shared management cluster, zero overhead) vs. Dedicated mode (self-hosted, full control) - [Databases](https://syself.com/docs/hetzner/apalla/platform/databases): Host PostgreSQL, MariaDB, ClickHouse, or MongoDB on bare-metal NVMe storage with low latency - [How Billing Works](https://syself.com/docs/hetzner/apalla/platform/billing/how-it-works): Billing calculated from Hetzner invoice CSV, filtering only Syself-managed resources - [Getting Hetzner Invoice CSV](https://syself.com/docs/hetzner/apalla/platform/billing/getting-hetzner-csv): Download Hetzner invoice in CSV format from the Hetzner dashboard - [Invoice Automation](https://syself.com/docs/hetzner/apalla/platform/billing/invoice-automation): Add hetzner-invoice@syself.com as billing contact for automatic monthly invoice forwarding ### Concepts - [Zero Trust](https://syself.com/docs/hetzner/apalla/concepts/zero-trust): Zero Trust security with mTLS via service mesh, no VPN required, full auditability, reduced lateral movement - [Self-Healing](https://syself.com/docs/hetzner/apalla/concepts/self-healing): Health daemon on every node performing real-time diagnostics; automatic remediation of crashed nodes, drift, and failures - [Cluster Stacks](https://syself.com/docs/hetzner/apalla/concepts/cluster-stacks): Versioned bundles (like a Dockerfile for clusters) containing K8s version, CNI, CSI, OS image — released every 2-3 weeks - [Management and Workload Clusters](https://syself.com/docs/hetzner/apalla/concepts/mgt-and-wl-clusters): Management cluster (Syself-hosted) orchestrates workload clusters (user infrastructure) via Cluster API ### How-To Guides — Cluster Configuration - [OIDC Configuration](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-configuration/oidc-configuration-for-your-cluster): Set oidcIssuerUrl, oidcClientID, oidcUsernameClaim, oidcGroupsClaim variables; create ClusterRole and ClusterRoleBinding - [Access Cluster Through a Domain](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-configuration/access-your-cluster-through-a-domain): Create Hetzner Load Balancer, set DNS A record, add clusterEndpointHost variable — cannot be changed after provisioning - [Cluster Stack Versions](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-configuration/using-specific-clusterstack-versions): Pin specific versions with autoSubscribe false, or auto-fetch latest with autoSubscribe true - [HA Kubernetes Control Plane](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-configuration/ha-kubernetes-control-plane): Use odd replica counts — 3 tolerates 1 failure, 5 tolerates 2; never use 1 replica in production - [etcd Encryption](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-configuration/etcd-encryption): Enable AES-CBC encryption at rest with etcdEncryptionSecretRef and a generated 32-byte key ### How-To Guides — Cluster Updates - [Update with Same Kubernetes Version](https://syself.com/docs/hetzner/apalla/how-to-guides/update-clusters/update-cluster-with-same-kubernetes-version): Update ClusterStack components (CNI, CSI, OS) by changing spec.topology.class and version - [Update to New Kubernetes Version](https://syself.com/docs/hetzner/apalla/how-to-guides/update-clusters/update-cluster-to-a-new-kubernetes-version): Create new ClusterStack for target K8s version, wait for node images, update Cluster resource ### How-To Guides — Server Management - [HCloud Server Management](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/hcloud-server-management): Configure VM types (CPX, CCX, CX, CAX series), multiple machine deployments, control plane sizing recommendations - [Adding Bare-Metal Servers](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/adding-baremetal-servers-to-your-cluster): Create HetznerBareMetalHost with serverID and rootDeviceHints (WWN), use matchLabels for targeting - [Labeling and Assigning Roles](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/labelling-and-assign-roles-on-nodes): Apply labels via machineDeployments metadata; labels with node-role.kubernetes.io prefix propagate to nodes - [Remove Specific Nodes](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/remove-specific-nodes): Annotate Machine with cluster.x-k8s.io/delete-machine, then reduce replicas - [Using ARM Servers](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/using-arm-servers): Add ARM node images to HetznerClusterStackReleaseTemplate, use workerarm64hcloud class (CAX21/31/41) - [SSH into Nodes](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/sshing-into-nodes): SSH with -p 100 flag or kubectl debug node for shell access - [Rebooting Bare-Metal Servers](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/rebooting-baremetal-servers): Pause Machine annotation, drain, reboot, uncordon, unpause — preserves local data - [Placement Groups](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/placement-groups): Hetzner spread placement groups ensure nodes on different physical hosts for fault tolerance - [Taints](https://syself.com/docs/hetzner/apalla/how-to-guides/server-management/taints): Not supported in Autopilot (CAPI limitation) — use labels and nodeSelector/affinity instead ### How-To Guides — Storage - [Using HCloud Storage](https://syself.com/docs/hetzner/apalla/how-to-guides/storage/using-hcloud-storage): Pre-configured hcloud CSI with standard StorageClass; ReadWriteOnce only, hcloud VMs only (not bare metal) - [Local Storage on Bare Metal](https://syself.com/docs/hetzner/apalla/how-to-guides/storage/local-storage-in-baremetal): TopoLVM for NVMe/SSD/HDD; up to 100x faster than network storage; requires cert-manager, pvcreate, vgcreate setup ### How-To Guides — Networking - [Configuring a Hetzner Load Balancer](https://syself.com/docs/hetzner/apalla/how-to-guides/network/configuring-a-hetzner-loadbalancer): Annotate Service with load-balancer.hetzner.cloud/location and /type matching cluster region - [Pod and Service Subnets](https://syself.com/docs/hetzner/apalla/how-to-guides/network/configuring-pod-and-service-subnets): Set CIDR blocks at creation time only (immutable); must be RFC 1918 private ranges - [Preserving Source Client IP](https://syself.com/docs/hetzner/apalla/how-to-guides/network/preserving-source-client-ip): Enable proxy protocol annotation for IP allowlisting and analytics - [Exposing Applications](https://syself.com/docs/hetzner/apalla/how-to-guides/network/exposing-apps): Expose apps with Ingress or Gateway API using Traefik, with Hetzner Load Balancer annotations - [Egress Gateway](https://syself.com/docs/hetzner/apalla/how-to-guides/network/egress-gateway): Cilium CiliumEgressGatewayPolicy for static outbound IPs; use bare metal (static IPs) not cloud VMs ### How-To Guides — GitOps - [Introduction to GitOps](https://syself.com/docs/hetzner/apalla/how-to-guides/gitops/introduction): Declarative, auditable, automated infrastructure management; store cluster manifests in Git - [Argo CD Integration](https://syself.com/docs/hetzner/apalla/how-to-guides/gitops/argocd): Install in workload cluster, add Autopilot as external destination, create Applications from Git repos - [Self-Management](https://syself.com/docs/hetzner/apalla/how-to-guides/gitops/self-management): Store Cluster, ClusterStack, and HetznerBareMetalMachine manifests in GitOps repo for full self-management ### How-To Guides — Other - [Cluster Autoscaler](https://syself.com/docs/hetzner/apalla/how-to-guides/cluster-autoscaler): Deploy in workload cluster with incluster-kubeconfig mode; supports bare metal base + cloud burst patterns - [GPU Support for AI Workloads](https://syself.com/docs/hetzner/apalla/how-to-guides/using-gpus-to-run-ai-workloads): Nvidia GPUs on bare-metal servers with auto-detection and automatic driver installation - [Headless Access to Autopilot](https://syself.com/docs/hetzner/apalla/how-to-guides/headless-access-to-autopilot): Service account token (gitops-sa-secret) for CI/CD pipelines; persistent, non-expiring token ### Troubleshooting - [Bare-Metal Rescue Mode](https://syself.com/docs/hetzner/apalla/troubleshooting/baremetal-servers): Enable permanent network boot (PXE) via Hetzner support or BIOS configuration - [Wiping Bare-Metal Disks](https://syself.com/docs/hetzner/apalla/troubleshooting/wiping-baremetal-server-disks): Use capi.syself.com/wipe-disk annotation or manual rescue system wipefs for DetectLinuxOnAnotherDisk errors - [DetectLinuxOnAnotherDisk](https://syself.com/docs/hetzner/apalla/troubleshooting/caph-linux-on-another-disk): Delete and reapply HetznerBareMetalHost if error persists after disk wiping - [Retrieving Log Collector Logs](https://syself.com/docs/hetzner/apalla/troubleshooting/retrieving-log-collector-logs): Run /opt/log-collector.sh on node, retrieve tarball with scp -P 100 for support debugging ## CAPH (Cluster API Provider Hetzner) — Open Source - [CAPH Introduction](https://syself.com/docs/caph/getting-started/introduction): Open-source Kubernetes Cluster API infrastructure provider for Hetzner, maintained by Syself - [CAPH Prerequisites](https://syself.com/docs/caph/getting-started/quickstart/prerequisites): Helm, kubectl, existing K8s cluster, clusterctl, and Hetzner API credentials required - [Management Cluster Setup](https://syself.com/docs/caph/getting-started/quickstart/management-cluster-setup): Initialize with clusterctl, configure Hetzner secrets, generate cluster YAML - [Creating a Workload Cluster](https://syself.com/docs/caph/getting-started/quickstart/creating-a-workload-cluster): Generate with clusterctl, deploy Cilium CNI and hcloud CCM, retrieve kubeconfig - [Bare Metal with CAPH](https://syself.com/docs/caph/topics/baremetal/introduction): Three cluster flavors for bare metal CPs with remediation, hcloud CPs + bare metal workers - [CAPH Object Reference](https://syself.com/docs/caph/reference/introduction): HetznerCluster, HCloudMachineTemplate, HetznerBareMetalHost, and other CRDs - [CAPH Annotations Reference](https://syself.com/docs/caph/reference/annotations): wipe-disk, ignore-check-disk, constant-bare-metal-hostname, reboot, permanent-error annotations - [Development Guide](https://syself.com/docs/caph/developers/development-guide): Tilt + kind development setup, testing, and contribution workflow ## Features - [Features Overview](https://syself.com/features): Comprehensive breakdown across infrastructure, simplification, automation, security, and flexibility - [Bare-Metal Kubernetes](https://syself.com/features/bare-metal-kubernetes): Automated lifecycle management of Hetzner bare-metal servers with higher performance and lower cost - [Kubernetes Autoscaling](https://syself.com/features/kubernetes-autoscaling): Dynamic node autoscaling with official Kubernetes Cluster Autoscaler; combine VMs and bare metal - [Self-Healing Clusters](https://syself.com/features/kubernetes-self-healing-clusters): Continuous reconciliation unlike Terraform/Ansible — infrastructure always matches desired state - [Lifecycle Management](https://syself.com/features/lifecycle-management): End-to-end automation from provisioning to scaling, upgrading, and decommissioning - [Flexible Updates](https://syself.com/features/kubernetes-updates): Zero-downtime rolling upgrades on your schedule with guaranteed compatibility testing - [Declarative Configuration](https://syself.com/features/declarative-configuration): kubectl apply for infrastructure — consistent, version-controlled, GitOps-compatible - [GitOps Deployment](https://syself.com/features/gitops-deployment): Full compatibility with Argo CD and Flux; Git as single source of truth for infrastructure - [Native Kubernetes](https://syself.com/features/native-kubernetes): Manage Kubernetes with Kubernetes — kubectl, Helm, operators, and controllers - [Pre-configured Clusters](https://syself.com/features/preconfigured-clusters): Production-ready clusters in minutes with tested best-practice defaults - [GPU Support](https://syself.com/features/kubernetes-gpu-support): Nvidia GPU integration on bare-metal with auto-detection and driver installation - [AI/ML Kubernetes](https://syself.com/features/kubernetes-machine-learning-ai-ml): Scalable GPU-accelerated infrastructure for training, inference, and ML pipelines - [ARM Support](https://syself.com/features/arm-support-kubernetes-nodes): Cost-efficient Ampere ARM64 nodes (CAX21/31/41) with managed node images - [Infrastructure Ownership](https://syself.com/features/kubernetes-ownership): Full control with BYOK — Syself has no access to your clusters or data - [OS Hardening](https://syself.com/features/os-hardening): Pre-configured, end-to-end tested, frequently updated managed node images - [GDPR Compliance](https://syself.com/features/gdpr-compliance): Compliant by default; European hosting on Hetzner; DPA available - [Open-Source Foundation](https://syself.com/features/open-source): Built on Cluster API and Kubernetes with community-driven innovation - [Dedicated Operational Mode](https://syself.com/features/dedicated): Self-host Syself Autopilot within your own infrastructure for maximum isolation - [Dedicated Support](https://syself.com/features/dedicated-solutions): Expert Kubernetes support with strong SLAs, 24/7 assistance, 30-minute response time - [Feature Requests](https://syself.com/features/feature-requests): Collaborative user-driven feature development with transparent progress tracking ## Solutions - [Enterprise](https://syself.com/solutions/enterprise): Reliable, secure, compliant Kubernetes for regulated industries with full infrastructure ownership - [Startups](https://syself.com/solutions/startup): Scalable and cost-effective Kubernetes — deploy instantly, no expertise required - [SMBs](https://syself.com/solutions/small-and-medium-sized-companies): Modern cloud infrastructure with automated management and up to 80% cost reduction - [SaaS Companies](https://syself.com/solutions/saas): Scalable Kubernetes at a fraction of hyperscaler costs, focus on product not infrastructure - [Agencies](https://syself.com/solutions/agency): Enterprise-grade managed Kubernetes to onboard clients effortlessly and reduce operational overhead - [MSPs](https://syself.com/solutions/msp): API-driven Kubernetes that eliminates infrastructure overhead; no Kubernetes expertise required - [Public Sector](https://syself.com/solutions/public-sector): Sovereign, compliant Kubernetes with zero-trust security, full data control, and audit trails - [AI & Machine Learning](https://syself.com/solutions/ai-machine-learning): GPU-accelerated bare-metal Kubernetes for demanding workloads at a fraction of hyperscaler costs - [Gaming & Entertainment](https://syself.com/solutions/gaming-entertainment): High-performance autoscaling with NVMe local storage for massive traffic spikes - [Cloud Modernization](https://syself.com/solutions/cloud-modernization): Migrate from legacy infrastructure to cloud-native Kubernetes with Infrastructure as Software - [Cost Optimization](https://syself.com/solutions/cost-optimization): Bare-metal base load + cloud autoscaling for maximum performance at minimum cost - [Application Deployment](https://syself.com/solutions/application-deployment): Deploy to production-ready clusters using Kubernetes manifests and GitOps — no Terraform needed - [Development Environments](https://syself.com/solutions/development-environment): 100% repeatable dev environments matching production in minutes - [Internal Platforms](https://syself.com/solutions/internal-platforms): Build developer platforms on Syself with managed databases and OIDC federation - [Kubernetes on Bare Metal](https://syself.com/solutions/kubernetes-bare-metal): Hetzner bare-metal with automated lifecycle, local NVMe, and confidential computing ## Case Studies - [LanguageTool](https://syself.com/case-studies/languagetool): AI writing assistant — 250 GPU bare-metal servers, 20,000 req/s, dedicated Autopilot for compliance - [eKool](https://syself.com/case-studies/ekool): Estonian edtech serving 70% of schools — 70% cost reduction, API latency from 110ms to 52ms - [Hesse.ai](https://syself.com/case-studies/hesse-ai): AI study platform — migrated from Azure AKS to Syself on Hetzner, similar cost with managed databases - [Maxroll](https://syself.com/case-studies/maxroll): Gaming platform — ARM nodes, bare-metal, GitOps; more flexible than Rancher, more polished than Sidero - [CCSolutions.io](https://syself.com/case-studies/ccsolutions): Tech agency — 50+ clusters, significantly easier than Rancher, reduced operational overhead ## News - [CAPH v1.0 General Availability](https://syself.com/news/syself-announces-general-availability-of-caph-v1-0): Cluster API Provider Hetzner reaches stable release for production Kubernetes - [GPU Support for Hetzner Bare Metal](https://syself.com/news/syself-brings-gpu-support-to-hetzner-bare-metal-servers): Nvidia GPU integration for AI/ML on bare-metal Kubernetes - [Local Storage Support](https://syself.com/news/syself-introduces-local-storage-support-for-kubernetes-on-bare-metal): NVMe local storage for high-performance databases on bare metal - [Dedicated Autopilot Launch](https://syself.com/news/syself-launches-dedicated-autopilot-on-hetzner): Self-hosted Autopilot for higher security and privacy requirements - [Public Beta Launch](https://syself.com/news/syself-launches-public-beta-of-syself-autopilot): Syself Autopilot becomes publicly available - [Bare Metal Kubernetes Support](https://syself.com/news/cluster-api-provider-supports-hetzner-dedicated-servers): CAPH adds Hetzner dedicated server support - [SCS VP-05 Tender Award](https://syself.com/news/syself-awarded-scs-vp-05-tender-to-develop-kubernetes-as-a-service-for-sovereign-cloud-stack): German government KaaS framework tender won - [Mitigant Security Partnership](https://syself.com/news/mitigant-and-syself-partner-to-enhance-security-for-managed-kbernetes-services): Enhanced Kubernetes security testing partnership - [Hivelocity Partnership](https://syself.com/news/syself-and-hivelocity-join-forces-to-expand-kubernetes): Expanding Kubernetes management to Hivelocity - [MVP Cluster Stacks](https://syself.com/news/syself-introduces-mvp-cluster-stacks): Versioned, reproducible cluster configurations introduced - [SCS Forum Founding Member](https://syself.com/news/syself-becomes-a-founding-member-of-the-scs-forum): Founding member of Sovereign Cloud Stack Forum - [Open Source Business Alliance](https://syself.com/news/syself-joins-the-open-source-business-alliance): Joined the German Open Source Business Alliance - [Affiliate and Partner Programs](https://syself.com/news/syself-launches-affiliate-and-partner-programs): Partner and affiliate programs for Kubernetes service providers ## Managed Services - [Managed Databases](https://syself.com/managed-databases): PostgreSQL, MariaDB, ClickHouse, MongoDB on bare-metal NVMe — eliminates external DBaaS costs - [Kubernetes on Hetzner](https://syself.com/hetzner): Enterprise-grade managed Kubernetes on Hetzner Cloud and dedicated servers with full lifecycle automation ## Pricing - [Pricing Plans](https://syself.com/pricing): Free plan (1 cluster, 5 nodes); paid plans with base fee + percentage of Hetzner spend; 14-day free trial - [Pricing Calculator](https://syself.com/pricing/calculator): Estimate costs based on infrastructure configuration and cloud provider usage ## Company - [About Syself](https://syself.com/about): Syself GmbH, Eschborn, Germany; remote-first team across 4 continents; 80% cost reduction, 65% faster time to market - [Platform Overview](https://syself.com/platform): Detailed automated Kubernetes cluster management platform overview - [Contact](https://syself.com/contact): contact@syself.com, +49 6196 586 9180, or book a demo - [Support](https://syself.com/support): support@syself.com, phone support, or documentation - [Book a Demo](https://syself.com/demo): Personalized 30-minute demo with Kubernetes experts - [Brand Assets](https://syself.com/brand): Brand guidelines, media kit, logos, and co-branding resources ## Legal - [Terms of Service](https://syself.com/legal/terms-of-service): 99.5% SLA, usage-based pricing, data protection, German law jurisdiction - [Privacy Policy](https://syself.com/legal/privacy-policy): GDPR-compliant privacy notice; Cloudflare hosting, analytics details, data subject rights - [Demo Policy](https://syself.com/legal/demo-policy): Privacy policy for demo booking via Zoho - [Imprint](https://syself.com/legal/imprint): Syself GmbH, Alfred-Herrhausen-Allee 3-5, 65760 Eschborn; HRB 129924 Frankfurt am Main ## Optional - [Resources Hub](https://syself.com/docs/hetzner/apalla/getting-started/introduction-to-syself-autopilot): Step-by-step tutorials and how-to guides for Kubernetes and Hetzner tasks - [Adding API Token on Hetzner](https://syself.com/docs/hetzner/apalla/getting-started/hetzner-account-preparation): Create Hetzner API tokens with read/write permissions - [Adding SSH Key to HCloud](https://syself.com/docs/hetzner/apalla/getting-started/hetzner-account-preparation): Upload SSH public keys to Hetzner Cloud project - [Creating a Hetzner Cluster](https://syself.com/docs/hetzner/apalla/getting-started/creating-clusters): End-to-end cluster creation tutorial - [Creating a Load Balancer](https://syself.com/docs/hetzner/apalla/how-to-guides/network/configuring-a-hetzner-loadbalancer): Configure Hetzner Load Balancers for services - [Adding New Users](https://syself.com/docs/hetzner/apalla/platform/adding-users): Add users to your organization - [Adding User Roles](https://syself.com/docs/hetzner/apalla/platform/authorization-and-assign-roles): Assign authorization roles in management cluster - [Get Hetzner Invoice as CSV](https://syself.com/docs/hetzner/apalla/platform/billing/getting-hetzner-csv): Export invoices for billing