# OpenClaw — Docker kasutusjuhend

Autonoomne AI-assistent (open-source, MIT). Vestlus, oskused (skills), kanalid (Telegram, WhatsApp, Discord), meeldetuletused, ülesannete korraldamine.
Kataloog: `/opt/docker-compose/third/server/openclaw/`

## Arhitektuur

| Komponent | Asukoht | Ühendus |
|-----------|---------|---------|
| **OpenClaw Gateway** | Docker konteiner (`repo-openclaw-gateway-1`) | port 18789 (loopback) |
| **DeepSeek V4 Flash** | Pilv (API) | `https://api.deepseek.com` |
| **Tailscale Serve** | Hostis `tailscale serve` | `https://ohmu.tail20e23.ts.net:18789` |
| **Config/State** | Hostil `/root/.openclaw/` | volume mount |
| **Kood** | `repo/` (git clone, .gitignore'itud) | — |

## Ligipääs

| Teenus | URL |
|--------|-----|
| Control UI (loopback) | http://127.0.0.1:18789 |
| Control UI (tailnet) | https://ohmu.tail20e23.ts.net:18789 |
| Tailnet IP | 100.87.1.24:18789 |

Control UI vajab esimesel brauserikülastusel **device approval**:
```
docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices list --json'
docker compose exec openclaw-gateway sh -lc 'node dist/index.js devices approve <requestId>'
```

## Kasutus

- Vaikimisi mudel: `deepseek/deepseek-v4-flash` (DeepSeek API, `DEEPSEEK_API_KEY` .env-is)
- Chat on ühine kõikides arvutites (üks `main` seanss, `session.dmScope: main`)
- Mudeli vahetamine: `docker compose run --rm --no-deps openclaw-cli models set <provider>/<model>`
- Staatus: `docker compose exec openclaw-gateway sh -lc 'node dist/index.js gateway health --token "$OPENCLAW_GATEWAY_TOKEN"'`

## Tavalised käsud

```
# Käivita/peatamine
docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml up -d
docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml down

# Logid
docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml logs -f openclaw-gateway

# CLI (ühekordne)
docker compose -f /opt/docker-compose/third/server/openclaw/docker-compose.yml run --rm openclaw-cli <cmd>
```

## Seadistamine (esmane)

1. `.env` loomine `.env.example`-st (sisaldab `DEEPSEEK_API_KEY`)
2. `cd repo && OPENCLAW_SKIP_ONBOARDING=1 ./scripts/docker/setup.sh`
3. DeepSeek auth: `docker compose run --rm --no-deps openclaw-cli models auth paste-api-key --provider deepseek`
4. Vaikimisi mudel: `docker compose run --rm --no-deps openclaw-cli models set deepseek/deepseek-v4-flash`
5. Tailscale Serve: `tailscale serve --bg --https=18789 http://127.0.0.1:18789`
6. Tailscale ACL: admin-konsoolist piirata `ohmu:18789` ainult kindlatele seadmetele

## Uuendamine

```
cd repo && git pull && export OPENCLAW_IMAGE=ghcr.io/openclaw/openclaw:latest && ./scripts/docker/setup.sh
```

## Turvalisus

- Gateway bind on `lan` aga port publitšeeritakse **loopback-ainult** (127.0.0.1:18789)
- Väljastpoolt pääseb ainult Tailscale Serve kaudu (tailnet)
- `gateway.auth.rateLimit` on seadistatud
- Control UI brauseriühendused nõuavad device approval'it