Fully featured & automated OpenClaw docker images
Fully featured & automated OpenClaw docker images
Openclaw Automated Build
Quick Start
Minimal (docker run)
ANTHROPIC_API_KEY — any supported provider key works (OpenAI, Gemini, etc.)AUTH_PASSWORD — protects the web UI with HTTP basic auth (user defaults to admin, override with AUTH_USERNAME)OPENCLAW_GATEWAY_TOKEN — internal API token; auto-generated if omitted, but set it explicitly for stable API accessOPENCLAW_ALLOWED_ORIGINS — (Required) Set to http://localhost:5173 or your frontend origin to enable CORS for the Control UI/data — persists state, config, and workspace across restarts
Full Setup (docker-compose)Includes persistent storage, browser sidecar (CDP + VNC), and webhook hooks. See docker-compose.yml.
After starting:
http://localhost:8080 (login: your AUTH_USERNAME / AUTH_PASSWORD)http://localhost:8080/browser/ (login: your AUTH_USERNAME / browser PASSWORD) — use this to log into sites that need auth (OAuth, 2FA, captchas). Openclaw reuses the session via CDP.
ArchitectureTwo-layer Docker build:
Dockerfile.base) — builds openclaw from source. Tagged coollabsio/openclaw-base:<version>.Dockerfile) — FROM base, adds nginx + env-to-config scripts. Tagged coollabsio/openclaw:<version>.
Files
auto-update.yml workflowTriggers: schedule: '0 */6 * * *' + workflow_dispatch (version, force_rebuild, skip_latest_tag).
Secrets needed (repo settings)
DOCKERHUB_USERNAME — Docker Hub usernameDOCKERHUB_TOKEN — Docker Hub access tokenGITHUB_TOKEN — auto-provided by GitHub Actions
Environment variables
AI Providers (at least one required)| Variable | Description |
|---|---|
ANTHROPIC_API_KEY |
Anthropic API key. Configures Claude models (Opus 4.5, Sonnet 4.5, Haiku 4.5). Set as primary when present. |
OPENAI_API_KEY |
OpenAI API key. Configures GPT models (5.2, 5, 4.5-preview). Primary if no Anthropic key. |
OPENROUTER_API_KEY |
OpenRouter API key. Primary if no Anthropic/OpenAI key. |
GEMINI_API_KEY |
Google Gemini API key. Primary if no other provider key set. |
XAI_API_KEY |
xAI API key. Configures Grok models. |
GROQ_API_KEY |
Groq API key. Configures Llama models on Groq hardware. |
MISTRAL_API_KEY |
Mistral API key. Configures Mistral Large and other models. |
CEREBRAS_API_KEY |
Cerebras API key. Configures Llama models on Cerebras hardware. |
VENICE_API_KEY |
Venice AI API key (OpenAI-compatible). Configures Llama 3.3 70B. |
MOONSHOT_API_KEY |
Moonshot API key (OpenAI-compatible). Configures Kimi K2.5. |
KIMI_API_KEY |
Kimi Coding API key (Anthropic-compatible). Configures K2P5. |
MINIMAX_API_KEY |
MiniMax API key (Anthropic-compatible). Configures MiniMax M2.1. |
ZAI_API_KEY |
ZAI API key. Configures GLM models. |
AI_GATEWAY_API_KEY |
Vercel AI Gateway API key. |
OPENCODE_API_KEY |
OpenCode API key. Also accepted as OPENCODE_ZEN_API_KEY. |
SYNTHETIC_API_KEY |
Synthetic API key (Anthropic-compatible). |
COPILOT_GITHUB_TOKEN |
GitHub Copilot token. Configures Claude models via GitHub. |
XIAOMI_API_KEY |
Xiaomi MiMo API key (Anthropic-compatible). Configures MiMo v2 Flash. |
Multiple providers can be set simultaneously. Priority for primary model: Anthropic > OpenAI > OpenRouter > Gemini > OpenCode > GitHub Copilot > xAI > Groq > Mistral > Cerebras > Venice > Moonshot > Kimi > MiniMax > Synthetic > ZAI > AI Gateway > Xiaomi > Bedrock > Ollama.
If a provider env var is removed, that provider section is cleaned from openclaw.json on next start.
Deepgram (audio transcription, optional)
| Variable | Description |
|---|---|
DEEPGRAM_API_KEY |
Deepgram API key. Enables audio transcription via Nova 3 model. |
| Amazon Bedrock (uses AWS credential chain) |
| Variable | Default | Description |
|---|---|---|
AWS_ACCESS_KEY_ID |
AWS access key. Both AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY required. |
|
AWS_SECRET_ACCESS_KEY |
AWS secret key. | |
AWS_REGION |
us-east-1 |
AWS region for Bedrock runtime endpoint. |
AWS_SESSION_TOKEN |
Optional session token for temporary credentials. | |
BEDROCK_PROVIDER_FILTER |
["anthropic"] |
Filter Bedrock model discovery by provider (JSON array or comma-separated string). |
| Ollama (local models, no API key needed) |
| Variable | Description |
|---|---|
OLLAMA_BASE_URL |
Ollama server URL (e.g. http://host.docker.internal:11434). Enables Ollama provider wh |
allowedOrigins missing https:// scheme when deployed via Coolify - breaks Control UI WebSocket connection
Docker Compose browser sidecar fails silently due to SSRF policy blocking private network
Browser image choice
[Bug] Docker image tag 2026.8.1 reports internal version 2026.7.1-2
Updated manually the image to 2026.3.28 - Gateway is not reachable over the subdomain and the public internet anymore
Nginx Basic Auth Re-prompts Continuously After Login (Regression in Latest Versions)
Docker cannot login after upgrade to 2026.4.21 or higher
It keeps getting the loading but never works properly
Custom Provider Api Key
CLI example start