I would probably just ssh into the Hetzner box and not connect it to my tailnet.