|
|
@@ -0,0 +1,71 @@
|
|
|
+# OpenClaw — Docker kasutusjuhend
|
|
|
+
|
|
|
+Autonoomne AI-assistent (open-source, MIT). Vestlus, oskused (skills), kanalid (Telegram, WhatsApp, Discord), meeldetuletused, ülesannete korraldamine.
|
|
|
+Kataloog: `/opt/docker-compose/third/server/openclaw/`
|
|
|
+
|
|
|
+## Arhitektuur
|
|
|
+
|
|
|
+| Komponent | Asukoht | Ühendus |
|
|
|
+|-----------|---------|---------|
|
|
|
+| **OpenClaw Gateway** | Docker konteiner (`repo-openclaw-gateway-1`) | port 18789 (loopback) |
|
|
|
+| **DeepSeek V4 Flash** | Pilv (API) | `https://api.deepseek.com` |
|
|
|
+| **Tailscale Serve** | Hostis `tailscale serve` | `https://ohmu.tail20e23.ts.net:18789` |
|
|
|
+| **Config/State** | Hostil `/root/.openclaw/` | volume mount |
|
|
|
+| **Kood** | `repo/` (git clone, .gitignore'itud) | — |
|
|
|
+
|
|
|
+## Ligipääs
|
|
|
+
|
|
|
+| Teenus | URL |
|
|
|
+|--------|-----|
|
|
|
+| Control UI (loopback) | http://127.0.0.1:18789 |
|
|
|
+| Control UI (tailnet) | https://ohmu.tail20e23.ts.net:18789 |
|
|
|
+| Tailnet IP | 100.87.1.24:18789 |
|
|
|
+
|
|
|
+Control UI vajab esimesel brauserikülastusel **device approval**:
|
|
|
+```
|
|
|
+docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices list --json'
|
|
|
+docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices approve <requestId>'
|
|
|
+```
|
|
|
+
|
|
|
+## Kasutus
|
|
|
+
|
|
|
+- Vaikimisi mudel: `deepseek/deepseek-v4-flash` (DeepSeek API, `DEEPSEEK_API_KEY` .env-is)
|
|
|
+- Chat on ühine kõikides arvutites (üks `main` seanss, `session.dmScope: main`)
|
|
|
+- Mudeli vahetamine: `docker compose run --rm --no-deps openclaw-cli models set <provider>/<model>`
|
|
|
+- Staatus: `docker compose exec openclaw-gateway sh -lc 'node dist/index.js gateway health --token "$OPENCLAW_GATEWAY_TOKEN"'`
|
|
|
+
|
|
|
+## Tavalised käsud
|
|
|
+
|
|
|
+```
|
|
|
+# Käivita/peatamine
|
|
|
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml up -d
|
|
|
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml down
|
|
|
+
|
|
|
+# Logid
|
|
|
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml logs -f openclaw-gateway
|
|
|
+
|
|
|
+# CLI (ühekordne)
|
|
|
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml run --rm openclaw-cli <cmd>
|
|
|
+```
|
|
|
+
|
|
|
+## Seadistamine (esmane)
|
|
|
+
|
|
|
+1. `.env` loomine `.env.example`-st (sisaldab `DEEPSEEK_API_KEY`)
|
|
|
+2. `cd repo && OPENCLAW_SKIP_ONBOARDING=1 ./scripts/docker/setup.sh`
|
|
|
+3. DeepSeek auth: `docker compose run --rm --no-deps openclaw-cli models auth paste-api-key --provider deepseek`
|
|
|
+4. Vaikimisi mudel: `docker compose run --rm --no-deps openclaw-cli models set deepseek/deepseek-v4-flash`
|
|
|
+5. Tailscale Serve: `tailscale serve --bg --https=18789 http://127.0.0.1:18789`
|
|
|
+6. Tailscale ACL: admin-konsoolist piirata `ohmu:18789` ainult kindlatele seadmetele
|
|
|
+
|
|
|
+## Uuendamine
|
|
|
+
|
|
|
+```
|
|
|
+cd repo && git pull && export OPENCLAW_IMAGE=ghcr.io/openclaw/openclaw:latest && ./scripts/docker/setup.sh
|
|
|
+```
|
|
|
+
|
|
|
+## Turvalisus
|
|
|
+
|
|
|
+- Gateway bind on `lan` aga port publitšeeritakse **loopback-ainult** (127.0.0.1:18789)
|
|
|
+- Väljastpoolt pääseb ainult Tailscale Serve kaudu (tailnet)
|
|
|
+- `gateway.auth.rateLimit` on seadistatud
|
|
|
+- Control UI brauseriühendused nõuavad device approval'it
|
ardo