Clawformation

Deploy OpenClaw on any Ubuntu VPS with a single script.

What This Is

This repository contains deployment automation and configuration for OpenClaw - not the OpenClaw source code itself. It provides:

One-script installation for fresh Ubuntu 24.04 VPS
Automated Docker setup with browser automation (Chromium + Playwright)
Configuration templates
Safe re-run capability (preserves existing configs)
Multi-channel support (Telegram, WhatsApp)

OpenClaw is an autonomous AI agent platform that runs 24/7, with multi-channel support (Telegram, WhatsApp, Discord, CLI), skill-based extensibility, and persistent memory.

Quick Start

Fresh VPS Installation

Spin up an Ubuntu 24.04 VPS (any provider works — Hetzner, DigitalOcean, Linode, Vultr, etc.)
Clone this repo and run the installer:

git clone https://github.com/lylo/clawformation.git /root/clawformation
cd /root/clawformation
bash setup.sh

The script will:
- Install Docker
- Clone OpenClaw source from GitHub
- Install browser automation (Chromium + Playwright)
- Generate secure tokens
- Build Docker images
- Start the gateway
Run onboarding:

cd /root/openclaw
docker compose run --rm openclaw-cli onboard

Add your Anthropic API key
Connect your messaging channel (Telegram or WhatsApp)
Accept default skills

Test it:

Send a message to your bot!

Configuration

Before First Install

The installer will prompt you to choose a messaging channel (Telegram, WhatsApp, or both) and enter the relevant credentials. No need to edit the script.

To override the default model, set it as an environment variable:

PRIMARY_MODEL="anthropic/claude-sonnet-4-5" bash /root/clawformation/setup.sh

After Installation

Config files are created at /root/.openclaw/:

openclaw.json - Main configuration (model, channels, heartbeat)
workspace/ - Agent personality, memory, and state
- SOUL.md - Core agent identity
- IDENTITY.md - Agent name and personality
- USER.md - Your profile
- memory/ - Daily logs

The setup script preserves existing configs — safe to re-run for updates.

Model Configuration

The agent can only use models listed in the models allowlist in openclaw.json. The primary field sets which model is used by default; any model used by cron jobs or channel overrides must also be in the allowlist.

{
  "agents": {
    "defaults": {
      "model": {
        "primary": "anthropic/claude-haiku-4-5"
      },
      "models": {
        "anthropic/claude-haiku-4-5": {},
        "anthropic/claude-sonnet-4-5": {},
        "anthropic/claude-opus-4-6": {}
      }
    }
  }
}

Available models:

Model	Use case	Relative cost
`anthropic/claude-haiku-4-5`	Fast responses, low cost	$
`anthropic/claude-sonnet-4-5`	Good balance of cost and capability	$$
`anthropic/claude-opus-4-6`	Complex reasoning, highest quality	$$$

To add a model, add it to the models object with an empty {} value. To change the default, update primary. Restart the gateway after any changes:

docker compose restart openclaw-gateway

Models not in the allowlist will fail with "model not allowed". You can also override the model per cron job (in cron/jobs.json) or per channel.

What Gets Installed

On the VPS

/root/openclaw/              # OpenClaw source (cloned from GitHub)
├── Dockerfile               # Base image
├── Dockerfile.skills        # Extended image (Go, Homebrew, browser)
├── docker-compose.yml       # Services
└── .env                     # Secrets

/root/.openclaw/             # Configuration (persistent)
├── openclaw.json            # Main config
└── workspace/               # Agent state & memory

Docker Services

openclaw-gateway - REST API on port 18789 (localhost only)
openclaw-cli - Command-line interface (on-demand)

Installed in Container

Node.js (base runtime)
Go 1.24.0 (for Go-based skills)
Homebrew (for package management)
Chromium + Playwright (browser automation)
npm + global packages

Features

Browser Automation

Full web automation via the browser tool:

Headless Chromium
Playwright for advanced automation
Screenshot capture
Form filling, scraping, navigation
JavaScript execution

Test it:

"Take a screenshot of https://example.com"

Heartbeat System

Agent checks in every 30 minutes (configurable) and can:

Check email
Monitor calendar
Proactive reminders
Background maintenance

Edit workspace/HEARTBEAT.md to customize checks.

Skills

Dynamically installable capabilities. Bundled skills:

healthcheck - Security auditing
skill-creator - Create new skills on the fly
weather - Current weather and forecasts

Agent can learn new skills when you ask!

Accessing Your Agent

Messaging

Send a message to your bot via Telegram or WhatsApp (whichever you configured).

Dashboard (Control UI)

ssh -N -L 18789:127.0.0.1:18789 root@YOUR_VPS_IP

Then open http://localhost:18789 and enter your gateway token (from .env).

The gateway must have gateway.bind: "lan" in openclaw.json for Docker port mapping to work (set by default in the template). The -N flag keeps the tunnel open without a shell.

CLI

ssh root@YOUR_VPS_IP
cd /root/openclaw
docker compose run --rm openclaw-cli

Maintenance

View Logs

Docker container logs:

cd /root/openclaw

# Follow logs in real-time (Ctrl+C to exit)
docker compose logs -f openclaw-gateway

# View all logs
docker compose logs openclaw-gateway

# Last 50 lines
docker compose logs --tail=50 openclaw-gateway

# Last 100 lines and follow
docker compose logs --tail=100 -f openclaw-gateway

# All services
docker compose logs -f

OpenClaw internal logs:

# Agent's daily memory logs
cat /root/.openclaw/workspace/memory/$(date +%Y-%m-%d).md

# Session history
cat /root/.openclaw/agents/main/sessions/sessions.json

# List all memory logs
ls -lh /root/.openclaw/workspace/memory/

Restart Services

docker compose restart openclaw-gateway

Update OpenClaw

cd /root/openclaw
docker compose down
git pull
docker compose build
docker compose up -d

Rebuild with Changes

If you update setup.sh and want to apply changes:

cd /root/openclaw
bash /root/clawformation/setup.sh

Config in /root/.openclaw/ is preserved.

Files in This Repo

clawformation/
├── README.md                      # This file
├── AGENTS.md                      # Project context for AI agents
├── setup.sh                       # Main installer
├── Dockerfile.skills              # Extended Docker image
├── docker-compose.yml             # Docker Compose services
├── openclaw.json.template         # Config template (Telegram + WhatsApp)
├── sync.sh                        # Pull server config backups
├── secure-vps.sh                  # VPS hardening script
├── vps-setup-guide.md             # Detailed setup guide
├── telegram-setup.md              # Telegram channel guide
├── skills-management.md           # Skills system reference
├── tailscale-setup.md             # Tailscale VPN setup
└── .gitignore

Not committed (gitignored):

.openclaw/ — server config backup (via sync.sh)
openclaw.json — live config (contains secrets)

Troubleshooting

Gateway won't start

docker compose logs openclaw-gateway

Check for config errors in /root/.openclaw/openclaw.json.

Browser tool not working

Check Chromium is installed:

docker compose exec openclaw-gateway which chromium
docker compose exec openclaw-gateway npx playwright --version

Should show /usr/bin/chromium and Playwright version.

"Can't reach the OpenClaw browser control service" / timeout:

This usually means Chromium is crashing on launch due to stale lock files from a previous unclean shutdown. Remove them:

docker compose exec openclaw-gateway rm -f \
  /home/node/.openclaw/browser/openclaw/user-data/SingletonLock \
  /home/node/.openclaw/browser/openclaw/user-data/SingletonSocket \
  /home/node/.openclaw/browser/openclaw/user-data/SingletonCookie \
  /home/node/.openclaw/browser/chrome/user-data/SingletonLock \
  /home/node/.openclaw/browser/chrome/user-data/SingletonSocket \
  /home/node/.openclaw/browser/chrome/user-data/SingletonCookie
docker compose restart openclaw-gateway

To prevent this permanently, ensure your docker-compose.yml has init: true and shm_size: '1gb' on the gateway service. The init flag adds a proper init process (tini) that reaps zombie Chromium processes, and shm_size gives Chromium enough shared memory.

Channel disconnected

Re-run onboarding:

docker compose run --rm openclaw-cli onboard

Config schema error

OpenClaw 2026.2.3+ requires heartbeat under agents.defaults, not at root:

{
  "agents": {
    "defaults": {
      "heartbeat": { "every": "30m" }
    }
  }
}

Note: heartbeat must be under agents.defaults, not at the root level.

Architecture

┌─────────────────────────────────────────────┐
│  VPS (Ubuntu 24.04)                         │
│                                              │
│  ┌────────────────────────────────────┐     │
│  │  Docker Container                  │     │
│  │                                    │     │
│  │  OpenClaw Gateway :18789           │     │
│  │  ├─ Claude (configurable model)     │     │
│  │  ├─ Browser Tool (Chromium)        │     │
│  │  ├─ Telegram / WhatsApp Plugin     │     │
│  │  └─ Skills                         │     │
│  │                                    │     │
│  │  Volume: /root/.openclaw           │     │
│  │  ├─ openclaw.json                  │     │
│  │  └─ workspace/                     │     │
│  └────────────────────────────────────┘     │
└─────────────────────────────────────────────┘
           ↓                    ↓
      Telegram/WhatsApp      REST API

Security

Gateway only binds to 127.0.0.1 (use SSH tunnel for remote access)
Secrets generated with openssl rand -hex 32
Channel allowlist prevents unauthorized access
All agent runtime as non-root user (node:1000)
Credentials stored encrypted in Docker volumes

Harden your VPS (optional but recommended):

bash /root/clawformation/secure-vps.sh

This configures SSH key-only auth, UFW firewall, fail2ban, and automatic security updates. See also tailscale-setup.md for private VPN access.

Support

OpenClaw Docs: https://github.com/openclaw/openclaw
Issues: Check install logs and docker compose logs
Config Reference: See openclaw.json.template and vps-setup-guide.md

License

MIT License. See LICENSE for details. OpenClaw itself is licensed separately.

Name		Name	Last commit message	Last commit date
Latest commit History 25 Commits
.gitignore		.gitignore
AGENTS.md		AGENTS.md
Dockerfile.skills		Dockerfile.skills
LICENSE		LICENSE
README.md		README.md
docker-compose.yml		docker-compose.yml
openclaw.json.template		openclaw.json.template
secure-vps.sh		secure-vps.sh
setup.sh		setup.sh
skills-management.md		skills-management.md
sync.sh		sync.sh
tailscale-setup.md		tailscale-setup.md
telegram-setup.md		telegram-setup.md
update.sh		update.sh
vps-setup-guide.md		vps-setup-guide.md

License

lylo/clawformation

Folders and files

Latest commit

History

Repository files navigation

Clawformation

What This Is

Quick Start

Fresh VPS Installation

Configuration

Before First Install

After Installation

Model Configuration

What Gets Installed

On the VPS

Docker Services

Installed in Container

Features

Browser Automation

Heartbeat System

Skills

Accessing Your Agent

Messaging

Dashboard (Control UI)

CLI

Maintenance

View Logs

Restart Services

Update OpenClaw

Rebuild with Changes

Files in This Repo

Troubleshooting

Gateway won't start

Browser tool not working

Channel disconnected

Config schema error

Architecture

Security

Support

License

About

Resources

License

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Languages

Packages