openclaw

Openclaw Automated Build Quick Start Minimal (`docker run`) - `ANTHROPIC_API_KEY` — any supported provider key works (OpenAI, Gemini, etc.) - `AUTH_PASSWORD` — protects the web UI with HTTP basic auth (user defaults to `admin`, override with `AUTH_USERNAME`) - `OPENCLAW_GATEWAY_TOKEN` — internal API token; auto-generated if omitted, but set it explicitly for stable API access - `OPENCLAW_ALLOWED_ORIGINS` — **(Required)** Set to `http://localhost:5173` or your frontend origin to enable CORS for the Control UI - `/data` — persists state, config, and workspace across restarts Full Setup (docker-compose) Includes persistent storage, browser sidecar (CDP + VNC), and webhook hooks. See `docker-compose.yml`. **After starting:** 1. **Openclaw UI** — `http://localhost:8080` (login: your `AUTH_USERNAME` / `AUTH_PASSWORD`) 2. **Browser desktop** — `http://localhost:8080/browser/` (login: your `AUTH_USERNAME` / browser `PASSWORD`) — use this to log into sites that need auth (OAuth, 2FA, captchas). Openclaw reuses the session via CDP. Architecture Two-layer Docker build: 1. **Base image** (`Dockerfile.base`) — builds openclaw from source. Tagged `coollabsio/openclaw-base:<version>`. 2. **Final image** (`Dockerfile`) — FROM base, adds nginx + env-to-config scripts. Tagged `coollabsio/openclaw:<version>`. Files auto-update.yml workflow Triggers: `schedule: '0 */6 * * *'` + `workflow_dispatch` (version, force_rebuild, skip_latest_tag). Secrets needed (repo settings) - `DOCKERHUB_USERNAME` — Docker Hub username - `DOCKERHUB_TOKEN` — Docker Hub access token - `GITHUB_TOKEN` — auto-provided by GitHub Actions Environment variables AI Providers (at least one required) | Variable | Description | |---|---| | `ANTHROPIC_API_KEY` | Anthropic API key. Configures Claude models (Opus 4.5, Sonnet 4.5, Haiku 4.5). Set as primary when present. | | `OPENAI_API_KEY` | OpenAI API key. Configures GPT models (5.2, 5, 4.5-preview). Primary if no Anthropic key. | | `OPENROUTER_API_KEY` | OpenRouter API key. Primary if no Anthropic/OpenAI key. | | `GEMINI_API_KEY` | Google Gemini API key. Primary if no other provider key set. | | `XAI_API_KEY` | xAI API key. Configures Grok models. | | `GROQ_API_KEY` | Groq API key. Configures Llama models on Groq hardware. | | `MISTRAL_API_KEY` | Mistral API key. Configures Mistral Large and other models. | | `CEREBRAS_API_KEY` | Cerebras API key. Configures Llama models on Cerebras hardware. | | `VENICE_API_KEY` | Venice AI API key (OpenAI-compatible). Configures Llama 3.3 70B. | | `MOONSHOT_API_KEY` | Moonshot API key (OpenAI-compatible). Configures Kimi K2.5. | | `KIMI_API_KEY` | Kimi Coding API key (Anthropic-compatible). Configures K2P5. | | `MINIMAX_API_KEY` | MiniMax API key (Anthropic-compatible). Configures MiniMax M2.1. | | `ZAI_API_KEY` | ZAI API key. Configures GLM models. | | `AI_GATEWAY_API_KEY` | Vercel AI Gateway API key. | | `OPENCODE_API_KEY` | OpenCode API key. Also accepted as `OPENCODE_ZEN_API_KEY`. | | `SYNTHETIC_API_KEY` | Synthetic API key (Anthropic-compatible). | | `COPILOT_GITHUB_TOKEN` | GitHub Copilot token. Configures Claude models via GitHub. | | `XIAOMI_API_KEY` | Xiaomi MiMo API key (Anthropic-compatible). Configures MiMo v2 Flash. | Multiple providers can be set simultaneously. Priority for primary model: Anthropic > OpenAI > OpenRouter > Gemini > OpenCode > GitHub Copilot > xAI > Groq > Mistral > Cerebras > Venice > Moonshot > Kimi > MiniMax > Synthetic > ZAI > AI Gateway > Xiaomi > Bedrock > Ollama. If a provider env var is removed, that provider section is cleaned from `openclaw.json` on next start. Deepgram (audio transcription, optional) | Variable | Description | |---|---| | `DEEPGRAM_API_KEY` | Deepgram API key. Enables audio transcription via Nova 3 model. | Amazon Bedrock (uses AWS credential chain) | Variable | Default | Description | |---|---|---| | `AWS_ACCESS_KEY_ID` | | AWS access key. Both `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` required. | | `AWS_SECRET_ACCESS_KEY` | | AWS secret key. | | `AWS_REGION` | `us-east-1` | AWS region for Bedrock runtime endpoint. | | `AWS_SESSION_TOKEN` | | Optional session token for temporary credentials. | | `BEDROCK_PROVIDER_FILTER` | `["anthropic"]` | Filter Bedrock model discovery by provider (JSON array or comma-separated string). | Ollama (local models, no API key needed) | Variable | Description | |---|---| | `OLLAMA_BASE_URL` | Ollama server URL (e.g. `http://host.docker.internal:11434`). Enables Ollama provider wh