Document Docker OpenClaw HMAC setup in README and compose.

Covers host-side agent auth, data/openclaw.env persistence, verify_hmac.py, and backend vs frontend port guidance (#424).

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
BigBodyCobain
2026-06-30 21:51:40 -06:00
co-authored by Cursor
parent c45b91c06c
commit a7d66c5289
3 changed files with 19 additions and 1 deletions
+5 -1
View File
@@ -385,7 +385,11 @@ AIS_API_KEY= # https://aisstream.io/ — free tier WebSocket key
# ── OpenClaw Agent ─────────────────────────────────────────────
# HMAC shared secret for remote OpenClaw agent authentication.
# Auto-generated via the Connect OpenClaw modal — do not set manually.
# Prefer AI Intel → Connect Agent → Bootstrap → Reveal in the UI.
# Docker: the secret is persisted to data/openclaw.env on the backend_data
# volume (survives container restarts). Host-side agents must sign requests
# to http://localhost:8000 — the dashboard :3000 proxy does not forward
# X-SB-* HMAC headers. Verify with openclaw-skills/shadowbroker/verify_hmac.py
# OPENCLAW_HMAC_SECRET=
# Access tier: "restricted" (read-only) or "full" (read+write+inject)
# OPENCLAW_ACCESS_TIER=restricted