Skip to content

v1.4.0 - Hybrid Deployment Architecture

Choose a tag to compare

View all tags
@yi-john-huang yi-john-huang released this 18 Feb 12:33
· 41 commits to master since this release
v1.4.0
fd31809
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

🚀 What's New

Hybrid deployment architecture is now the primary and recommended deployment method, combining the best of both native and containerized approaches.

Architecture

Internet → Cloudflare Edge (optional) → Proxy (Docker) → OpenClaw (systemd) → LLM APIs
  • OpenClaw Gateway: Native (systemd) for better OAuth and plugin support
  • Security Proxy: Docker container for isolation and easy updates
  • Cloudflare Tunnel: Optional public HTTPS access without port forwarding

✨ Key Features

One-Click Installer

  • 11 automated phases from prerequisites to verification
  • Integrated Cloudflare Tunnel setup (optional, interactive)
  • OpenAI OAuth authentication flow
  • Stable release strategy using Git tags
  • Multi-architecture support (amd64 + arm64)

Usage

# Sync repository to server
rsync -avz --exclude='.git' --exclude='.venv' --exclude='node_modules' \
  openclaw-secure-stack/ user@server:/tmp/openclaw-secure-stack/

# Run one-click installer
ssh -t user@server \
  "cd /tmp/openclaw-secure-stack && sudo bash deploy/hybrid/install-hybrid.sh"

📦 What's Included

Added

  • deploy/hybrid/install-hybrid.sh - One-click installer (609 lines)
  • deploy/hybrid/docker-compose.hybrid.yml - Proxy configuration
  • deploy/hybrid/README.md - Deployment guide
  • docs/openclaw-cloudflare-tunnel-setup.md - Full tutorial (18 pages)
  • docs/openclaw-quick-reference.md - Command reference (3 pages)

Changed

  • README.md - Updated deployment documentation
  • CHANGELOG.md - Full v1.4.0 changelog
  • pyproject.toml - Version bump to 1.4.0

Removed

  • deploy/native/ - Superseded by hybrid architecture (17 files, 2,533 lines)

🔧 Bug Fixes

Critical (P0-P1)

  1. Audit logging enabled - Added AUDIT_LOG_PATH to docker-compose
  2. OAuth permissions fixed - Recursive chown for .openclaw directory
  3. HDD mount substitution - Custom paths properly honored
  4. Hardcoded paths removed - Respects user configuration

Medium (P2)

  1. rsync prerequisite - Added to package install list
  2. ARM64 support - Architecture detection for cloudflared

Low (P3)

  1. Documentation accuracy - Corrected interactive prompt claims

⚠️ Breaking Changes

Native deployment removed - The fully-native deployment option has been superseded by the hybrid architecture.

Migration Path

If you're on v1.3.0 native deployment:

# 1. Backup existing data
sudo tar -czf ~/openclaw-backup.tar.gz \
  /var/lib/openclaw \
  /var/lib/openclaw-proxy \
  /etc/openclaw-secure-stack

# 2. Stop old services
sudo systemctl stop openclaw openclaw-proxy caddy

# 3. Run hybrid installer
cd /tmp/openclaw-secure-stack
sudo bash deploy/hybrid/install-hybrid.sh

# 4. Restore configuration if needed

📊 Statistics

  • 23 files changed: +1,727 / -2,647 lines
  • Net reduction: -920 lines (more functionality with less code)
  • Code review: 8 issues addressed (2 from automated review, 6 from manual)
  • Architecture: Hybrid (native + Docker)
  • Multi-arch: amd64 + arm64

📖 Documentation

🙏 Credits

This release was developed with assistance from Claude Sonnet 4.5.

Full Changelog: v1.3.0...v1.4.0

Assets 2
Loading