Gehärtete OpenClaw Installation auf einem Hetzner VPS

# Verzeichnisse anlegen
mkdir -p /opt/openclaw/{config,workspace/public,logs}
chmod 700 /opt/openclaw

# Gateway-Token generieren
GATEWAY_TOKEN=$(openssl rand -hex 32)

# .env erstellen
cat > /opt/openclaw/.env << EOF
# LLM Provider — Google Gemini (kostenlos)
GOOGLE_API_KEY=DEIN_GOOGLE_API_KEY

# Gateway-Sicherheit
OPENCLAW_GATEWAY_TOKEN=${GATEWAY_TOKEN}

# Bind-Modus
OPENCLAW_BIND_MODE=loopback

# Node Environment
NODE_ENV=production
EOF

chmod 600 /opt/openclaw/.env

# OpenClaw — Gehärtete Installation

services:
  openclaw-gateway:
    image: ghcr.io/openclaw/openclaw:2026.4.11
    container_name: openclaw-gateway
    restart: unless-stopped
    hostname: openclaw

    # --- Sicherheit ---
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    read_only: true
    tmpfs:
      - /tmp:noexec,nosuid,size=100M
      - /run:noexec,nosuid,size=10M
      - /home/node/.npm:noexec,nosuid,size=50M

    # --- Netzwerk: NUR Loopback ---
    ports:
      - "127.0.0.1:18789:18789"

    # --- Volumes ---
    volumes:
      - /opt/openclaw/config:/home/node/.openclaw:rw
      - /opt/openclaw/workspace:/home/node/workspace:rw

    env_file:
      - /opt/openclaw/.env

    environment:
      - NODE_ENV=production
      - OPENCLAW_BIND_MODE=loopback

    # --- Ressourcen-Limits ---
    deploy:
      resources:
        limits:
          memory: 1G
          cpus: '1.0'
        reservations:
          memory: 256M
          cpus: '0.25'

    # --- Health-Check ---
    healthcheck:
      test: ["CMD", "node", "-e",
        "fetch('http://127.0.0.1:18789/health').then(r=>{if(!r.ok)throw 1})"]
      interval: 30s
      timeout: 10s
      retries: 3
      start_period: 30s

    networks:
      - openclaw-isolated

    logging:
      driver: json-file
      options:
        max-size: "20m"
        max-file: "3"

    # --- DNS: Nur öffentliche Resolver ---
    dns:
      - 1.1.1.1
      - 8.8.8.8

  # --- Static Webserver (optional) ---
  openclaw-web:
    image: nginx:alpine
    container_name: openclaw-web
    restart: unless-stopped

    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL
    cap_add:
      - NET_BIND_SERVICE
      - CHOWN
      - SETUID
      - SETGID
    read_only: true
    tmpfs:
      - /tmp:noexec,nosuid,size=10M
      - /var/cache/nginx:noexec,nosuid,size=20M
      - /run:noexec,nosuid,size=5M

    # READ-ONLY Mount
    volumes:
      - /opt/openclaw/workspace/public:/usr/share/nginx/html:ro

    deploy:
      resources:
        limits:
          memory: 128M
          cpus: '0.25'

    networks:
      - proxy  # Anpassen: z.B. "coolify", "traefik_default"

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.https-openclaw-web.rule=Host(`SUBDOMAIN.example.com`)"
      - "traefik.http.routers.https-openclaw-web.tls=true"
      - "traefik.http.routers.https-openclaw-web.tls.certresolver=letsencrypt"
      - "traefik.http.services.https-openclaw-web.loadbalancer.server.port=80"

networks:
  openclaw-isolated:
    driver: bridge
    driver_opts:
      com.docker.network.bridge.name: br-openclaw
    ipam:
      config:
        - subnet: 10.0.200.0/24
  proxy:
    external: true

#!/bin/bash
# OpenClaw Netzwerk-Isolation via DOCKER-USER Chain

set -euo pipefail

OPENCLAW_SUBNET="10.0.200.0/24"
CHAIN="DOCKER-USER"

# Alte Regeln entfernen (idempotent)
for TARGET in DROP RETURN; do
  while iptables -D "$CHAIN" -s "$OPENCLAW_SUBNET" -j "$TARGET" 2>/dev/null; do :; done
done
for DEST in 10.0.0.0/16 172.16.0.0/12 192.168.0.0/16 169.254.169.254/32 224.0.0.0/4; do
  while iptables -D "$CHAIN" -s "$OPENCLAW_SUBNET" -d "$DEST" -j DROP 2>/dev/null; do :; done
done

# Regeln setzen
iptables -I "$CHAIN" 1 -s "$OPENCLAW_SUBNET" -d "$OPENCLAW_SUBNET" -j RETURN
iptables -I "$CHAIN" 2 -s "$OPENCLAW_SUBNET" -d 10.0.0.0/16 -j DROP
iptables -I "$CHAIN" 3 -s "$OPENCLAW_SUBNET" -d 172.16.0.0/12 -j DROP
iptables -I "$CHAIN" 4 -s "$OPENCLAW_SUBNET" -d 192.168.0.0/16 -j DROP
iptables -I "$CHAIN" 5 -s "$OPENCLAW_SUBNET" -d 169.254.169.254/32 -j DROP
iptables -I "$CHAIN" 6 -s "$OPENCLAW_SUBNET" -d 224.0.0.0/4 -j DROP

[Unit]
Description=OpenClaw Network Isolation Firewall Rules
After=docker.service
Requires=docker.service

[Service]
Type=oneshot
RemainAfterExit=yes
ExecStart=/opt/openclaw/firewall-rules.sh

[Install]
WantedBy=multi-user.target

systemctl daemon-reload
systemctl enable openclaw-firewall.service
/opt/openclaw/firewall-rules.sh

# Container starten
cd /opt/openclaw
docker compose up -d openclaw-gateway

# Warten, dann Ownership fixen
sleep 15
chown -R 1000:1000 /opt/openclaw/config /opt/openclaw/workspace

# Neustart mit korrekten Permissions
docker compose restart openclaw-gateway

# Gemini 2.5 Flash als Modell
docker exec openclaw-gateway \
  node dist/index.js config set agents.defaults.model.primary "google/gemini-2.5-flash"

# Unnötige Plugins deaktivieren (spart RAM + schnellerer Start)
docker exec openclaw-gateway \
  node dist/index.js config set plugins.entries.acpx.enabled false
docker exec openclaw-gateway \
  node dist/index.js config set plugins.entries.browser.enabled false

# Active Memory aktivieren (kostenlos auf Gemini)
docker exec openclaw-gateway \
  node dist/index.js config set plugins.entries.active-memory.enabled true

# Neustart
docker compose restart openclaw-gateway

docker exec openclaw-gateway \
  node dist/index.js channels add --channel telegram --token "DEIN-BOT-TOKEN"

docker compose restart openclaw-gateway

docker exec openclaw-gateway \
  node dist/index.js pairing approve telegram DEIN-PAIRING-CODE

mkdir -p /opt/openclaw/config/workspace/skills/imagine
chown -R 1000:1000 /opt/openclaw/config/workspace/skills

---
name: imagine
description: "Generate images via Pollinations.ai (free, no API key)."
metadata:
  { "openclaw": { "emoji": "🎨", "requires": { "bins": ["curl"] } } }
---

# Imagine — Bildgenerierung

```bash
curl -sL "https://image.pollinations.ai/prompt/PROMPT?width=1024&height=1024&nologo=true" \
  -o /home/node/workspace/public/bild.jpg
```

Parameter: width, height, nologo=true, model (flux, flux-realism, flux-anime)

# Platzhalter-Seite
cat > /opt/openclaw/workspace/public/index.html << 'HTML'
<!DOCTYPE html>
<html><body><h1>OpenClaw Workspace</h1></body></html>
HTML

chown 1000:1000 /opt/openclaw/workspace/public/index.html
docker compose up -d openclaw-web

# Status
docker ps --filter name=openclaw --format "table {{.Names}}\t{{.Status}}"

# Logs
docker logs -f openclaw-gateway

# Config anzeigen
docker exec openclaw-gateway node -e "
const fs = require('fs');
const c = JSON.parse(fs.readFileSync('/home/node/.openclaw/openclaw.json','utf8'));
console.log(JSON.stringify(c, null, 2));"

# Modell wechseln
docker exec openclaw-gateway \
  node dist/index.js config set agents.defaults.model.primary "google/gemini-2.5-flash"
docker compose restart openclaw-gateway

# Streaming an/aus
docker exec openclaw-gateway \
  node dist/index.js config set channels.telegram.streaming.mode "partial"

# Update (Version in docker-compose.yml anpassen)
docker compose pull openclaw-gateway
docker compose up -d openclaw-gateway
docker image prune -f

# Ressourcen
docker stats --no-stream openclaw-gateway openclaw-web