build { sources = [ "source.hcloud.main" ] provisioner "file" { direction = "upload" source = "./rootfs" destination = "/tmp" } provisioner "shell" { environment_vars = [ "DPKG_FORCE=confold", "DEBIAN_FRONTEND=noninteractive" ] inline_shebang = "/bin/sh -eux" inline = [ < /etc/apt/sources.list.d/wireguard.list apt-key adv --keyserver keyserver.ubuntu.com --recv-keys E1B39B6EF6DDB96564797591AE33835F504A1A25 apt-get update apt-get upgrade -yo DPkg::options::=--force-confold apt-get install -yo DPkg::options::=--force-confold dns-root-data fail2ban ufw unattended-upgrades unbound apt-get install -yo DPkg::options::=--force-confold linux-headers-$(uname -r) openresolv wireguard apt-get install -yo DPkg::options::=--force-confold htop iperf3 qrencode nano ssh-import-id apt-get autoremove -y EOF , < /etc/resolv.conf systemctl enable --now unbound.service unbound-resolvconf.service EOF , <