Auto-updating OpenClaw deployment wrapper for Northflank.
OpenClaw's gateway binds to 127.0.0.1 by default, which is unreachable behind Northflank's load balancer. This wrapper:
- Builds OpenClaw from source (public upstream)
- Runs the gateway on internal loopback (
:18789) - Reverse-proxies all traffic from the public port (
:8080) - Provides a browser-based setup wizard at
/setup - Auto-updates via GitHub Actions when new OpenClaw releases are published
Create a Northflank service pointing to this repo, set SETUP_PASSWORD, build and deploy. Visit /setup to configure.
| Variable | Required | Description |
|---|---|---|
SETUP_PASSWORD |
Yes | Protects the /setup wizard |
OPENCLAW_STATE_DIR |
No | Config storage (default: ~/.openclaw) |
OPENCLAW_WORKSPACE_DIR |
No | Workspace storage (default: $STATE_DIR/workspace) |
OPENCLAW_GATEWAY_TOKEN |
No | Auto-generated if not set |
The GitHub Actions workflow checks for new upstream OpenClaw releases daily at 06:00 UTC, records the latest version in .openclaw-version, and triggers a Northflank rebuild via webhook.
Set NORTHFLANK_WEBHOOK_URL in repo secrets to enable auto-deploy.
MIT