Hetzner Terraform Machines Configuration

I need assistance in creating and configuring 6 Hetzner machines via Terraform.

Requirements:
- 3 Machines with public IP + Private IP (Public-A, Public-B, Public-C)
- 3 Machines with private IP (Private-A, Private-B, Private-C)
- All private machines to be assigned a static private IP on the 192.168.1.0/24 network
- Public-A to act as NAT Gateway for private machines for all outgoing internet traffic
- SSH access from Public-A to all private machines using SSH keys
- Configure networking to ensure that after reboot, public interfaces of (Public-A, Public-B, Public-C) remain as default gateway without switching to private network

I prefer using NetworkManager over hc-utils for networking configuration because it provides more flexibility. I would like all 192.168.1.X machines to be assigned a /24 network instead of /32.

Security:
- SSH access should be configured for both key-based and password authentication

Software:
- Machines should be set up with just a basic Debian 12 installation, no additional packages required

Ideal Skills and Experience:
- Proficient in Terraform and Hetzner
- Experience with Debian 12
- Familiar with NetworkManager
- Knowledgeable in SSH configurations and NAT setup
- Able to configure and manage private and public IPs efficiently