Keep your cloud-hosted OpenClaw private by default.
What it does
Guides secure OpenClaw deployment and hardening on Linux cloud hosts, giving users a private-access architecture, configuration baseline, and safety checklist.
When to use it
Use for secure OpenClaw cloud hosting, remote access decisions, or reviews of an existing deployment's exposure.
How to use it
Give it an OpenClaw deployment, hardening, or remote-access question; it returns setup guidance, prioritized fixes, or an access-path recommendation.
Uses
Good to know
- cannot be undone: /etc/nftables.conf; /etc/ssh/sshd_config.d/99-openclaw-hardening.conf; /etc/apt/apt.conf.d/20auto-upgrades
What you need · 2
The deployment pattern targets a Linux cloud host; its concrete example commands are for Debian or Ubuntu.
Reads the generated gateway token from /home/openclaw/.openclaw/.env for the token-authenticated gateway.
Access · 8
This skill
/etc/nftables.conf
Replaces your host firewall rules (irreversible)
/etc/ssh/sshd_config.d/99-openclaw-hardening.conf
Disables password and root SSH (irreversible)