Lisa OpenClaw: autonoomne AI assistent (DeepSeek V4 Flash, Tailscale Serve)

third/server/openclaw/.env.example

@@ -0,0 +1,11 @@
+# OpenClaw Docker konfiguratsioon — kopeeri .env-iks ja täida
+OPENCLAW_IMAGE=ghcr.io/openclaw/openclaw:latest
+OPENCLAW_TZ=Europe/Tallinn
+OPENCLAW_GATEWAY_BIND=lan
+OPENCLAW_GATEWAY_PORT=127.0.0.1:18789
+OPENCLAW_BRIDGE_PORT=127.0.0.1:18790
+OPENCLAW_MSTEAMS_PORT=127.0.0.1:3978
+OPENCLAW_SKIP_ONBOARDING=1
+OPENCLAW_DISABLE_BONJOUR=1
+# DeepSeek API võti (platvorm: https://platform.deepseek.com/api_keys)
+DEEPSEEK_API_KEY=sk-...

third/server/openclaw/LOEMIND.md

@@ -0,0 +1,71 @@
+# OpenClaw — Docker kasutusjuhend
+
+Autonoomne AI-assistent (open-source, MIT). Vestlus, oskused (skills), kanalid (Telegram, WhatsApp, Discord), meeldetuletused, ülesannete korraldamine.
+Kataloog: `/opt/docker-compose/third/server/openclaw/`
+
+## Arhitektuur
+
+| Komponent | Asukoht | Ühendus |
+|-----------|---------|---------|
+| **OpenClaw Gateway** | Docker konteiner (`repo-openclaw-gateway-1`) | port 18789 (loopback) |
+| **DeepSeek V4 Flash** | Pilv (API) | `https://api.deepseek.com` |
+| **Tailscale Serve** | Hostis `tailscale serve` | `https://ohmu.tail20e23.ts.net:18789` |
+| **Config/State** | Hostil `/root/.openclaw/` | volume mount |
+| **Kood** | `repo/` (git clone, .gitignore'itud) | — |
+
+## Ligipääs
+
+| Teenus | URL |
+|--------|-----|
+| Control UI (loopback) | http://127.0.0.1:18789 |
+| Control UI (tailnet) | https://ohmu.tail20e23.ts.net:18789 |
+| Tailnet IP | 100.87.1.24:18789 |
+
+Control UI vajab esimesel brauserikülastusel **device approval**:
+```
+docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices list --json'
+docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices approve <requestId>'
+```
+
+## Kasutus
+
+- Vaikimisi mudel: `deepseek/deepseek-v4-flash` (DeepSeek API, `DEEPSEEK_API_KEY` .env-is)
+- Chat on ühine kõikides arvutites (üks `main` seanss, `session.dmScope: main`)
+- Mudeli vahetamine: `docker compose run --rm --no-deps openclaw-cli models set <provider>/<model>`
+- Staatus: `docker compose exec openclaw-gateway sh -lc 'node dist/index.js gateway health --token "$OPENCLAW_GATEWAY_TOKEN"'`
+
+## Tavalised käsud
+
+```
+# Käivita/peatamine
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml up -d
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml down
+
+# Logid
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml logs -f openclaw-gateway
+
+# CLI (ühekordne)
+docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml run --rm openclaw-cli <cmd>
+```
+
+## Seadistamine (esmane)
+
+1. `.env` loomine `.env.example`-st (sisaldab `DEEPSEEK_API_KEY`)
+2. `cd repo && OPENCLAW_SKIP_ONBOARDING=1 ./scripts/docker/setup.sh`
+3. DeepSeek auth: `docker compose run --rm --no-deps openclaw-cli models auth paste-api-key --provider deepseek`
+4. Vaikimisi mudel: `docker compose run --rm --no-deps openclaw-cli models set deepseek/deepseek-v4-flash`
+5. Tailscale Serve: `tailscale serve --bg --https=18789 http://127.0.0.1:18789`
+6. Tailscale ACL: admin-konsoolist piirata `ohmu:18789` ainult kindlatele seadmetele
+
+## Uuendamine
+
+```
+cd repo && git pull && export OPENCLAW_IMAGE=ghcr.io/openclaw/openclaw:latest && ./scripts/docker/setup.sh
+```
+
+## Turvalisus
+
+- Gateway bind on `lan` aga port publitšeeritakse **loopback-ainult** (127.0.0.1:18789)
+- Väljastpoolt pääseb ainult Tailscale Serve kaudu (tailnet)
+- `gateway.auth.rateLimit` on seadistatud
+- Control UI brauseriühendused nõuavad device approval'it

third/server/openclaw/docker-compose.yml

@@ -0,0 +1 @@
+repo/docker-compose.yml