From 595d6f7f591714aa5cdc7daff19526c93a8316af Mon Sep 17 00:00:00 2001
From: Sprite <noreply@sprite.dev>
Date: Sat, 7 Feb 2026 21:44:08 +0000
Subject: [PATCH] refactor: hetzner/lib - add bash safety flags

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
---
 hetzner/lib/common.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hetzner/lib/common.sh b/hetzner/lib/common.sh
index 792e4974..fa3d04da 100755
--- a/hetzner/lib/common.sh
+++ b/hetzner/lib/common.sh
@@ -1,4 +1,5 @@
 #!/bin/bash
+set -euo pipefail
 # Common bash functions for Hetzner Cloud spawn scripts
 
 # ============================================================
@@ -19,7 +20,7 @@ source "$SCRIPT_DIR/../../shared/common.sh" || {
 # ============================================================
 
 readonly HETZNER_API_BASE="https://api.hetzner.cloud/v1"
-readonly SSH_OPTS="-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR -i $HOME/.ssh/id_ed25519"
+# SSH_OPTS is now defined in shared/common.sh
 
 # Centralized curl wrapper for Hetzner API
 hetzner_api() {