Tailscale Exit Node Terraformer
Tunnel Digger is a browser-based tool that generates Terraform configuration files to deploy Tailscale exit nodes on cloud providers. It provides an interactive wizard that walks you through choosing a server location, selecting a provider, entering credentials, and downloading a ready-to-deploy Terraform package.
Demonstration available at: tunnel-digger.je-7ea.workers.dev
Supported providers:
- Hetzner
- DigitalOcean
- Linode
Project Aims:
- Give users sovereignty over their VPN infrastructure
- Introduce Terraform and Infrastructure as Code in an approachable manner
- Privacy-focused — no analytics, no tracking, no data collection
Features
Interactive Leaflet map for choosing server location
Step-by-step wizard flow: location, provider setup, credentials, review, and download
Generated Terraform package including main.tf, variables.tf, cloud-init.yaml, terraform.tfvars, deploy scripts, .gitignore, and README
"I don't trust you" option — enter credentials manually without using the in-browser form
Dark/light mode toggle for comfortable viewing
FAQ page answering common questions about deployment and usage
Client-side-only execution — no backend, no data sent to servers
Responsive design for desktop and mobile devices
Accessible markup with semantic HTML and keyboard navigation
Design Philosophy
Privacy-focused design — no analytics, no tracking, no backend. Your data never leaves your browser.
Security-conscious approach — generated .gitignore excludes secrets, and security notes document the trust model so users can make informed decisions.
AI-assisted HTML/CSS/JS development, with hands-on Terraform configurations drawn from real Infrastructure as Code experience.
VPN sovereignty — providing an alternative to trusting commercial VPN companies by letting users deploy and control their own exit nodes.