Remote Access

Accessing OpenClaw from anywhere.

Overview

Access your OpenClaw instance remotely:

• SSH tunneling
• Tailscale VPN
• Reverse proxy

SSH Tunnel

Simple and secure:

# On remote machine
ssh -L 3000:localhost:3000 user@your-server

Then access http://localhost:3000 on your local machine.

Tailscale

Using Tailscale for secure access:

1. Install Tailscale on both machines
2. Access via Tailscale IP

# Access via Tailscale
http://100.x.x.x:3000

Reverse Proxy

Nginx Example

server {
    listen 443 ssl;
    server_name openclaw.yourdomain.com;

    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/key.pem;

    location / {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
    }
}

Caddy Example

openclaw.yourdomain.com {
    reverse_proxy localhost:3000
}

Security Considerations

When exposing remotely:

1. Always use HTTPS
2. Enable authentication
3. Consider IP whitelisting
4. Use strong passwords/keys

Configuration

{
  gateway: {
    host: "0.0.0.0",      // Listen on all interfaces
    auth: {
      enabled: true,
      apiKey: "your-key"
    }
  }
}

See Also

• Security
• Authentication